CVE-2006-0804 Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow.
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tin | = 1.0_pl0 | No fix listed |
| tin | = 1.0_pl1 | No fix listed |
| tin | = 1.0_pl2 | No fix listed |
| tin | = 1.0_pl3 | No fix listed |
| tin | = 1.0_pl4 | No fix listed |
| tin | = 1.0_pl5 | No fix listed |
| tin | = 1.1_pl0 | No fix listed |
| tin | = 1.1_pl1 | No fix listed |
| tin | = 1.1_pl2 | No fix listed |
| tin | = 1.1_pl3 | No fix listed |
| tin | = 1.1_pl4 | No fix listed |
| tin | = 1.1_pl5 | No fix listed |
| tin | = 1.1_pl6 | No fix listed |
| tin | = 1.1_pl7 | No fix listed |
| tin | = 1.1_pl8 | No fix listed |
| tin | = 1.1_pl9 | No fix listed |
| tin | = 1.2_pl0 | No fix listed |
| tin | = 1.2_pl1 | No fix listed |
| tin | = 1.2_pl2 | No fix listed |
| tin | = 1.4.0 | No fix listed |
| tin | = 1.4.1 | No fix listed |
| tin | = 1.4.2 | No fix listed |
| tin | = 1.4.3 | No fix listed |
| tin | = 1.4.4 | No fix listed |
| tin | = 1.4.5 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| tin | = 1.4.6 | No fix listed |
| tin | = 1.4.7 | No fix listed |
| tin | = 1.6.0 | No fix listed |
| tin | = 1.6.1 | No fix listed |
| tin | = 1.6.2 | No fix listed |
| tin | = 1.8.0 | No fix listed |
| debian/tin(Debian:12) | < 1:1.8.2-1 | 1:1.8.2-1 |
| debian/tin(Debian:13) | < 1:1.8.2-1 | 1:1.8.2-1 |
| debian/tin(Debian:14) | < 1:1.8.2-1 | 1:1.8.2-1 |
References
- 19130 third-party-advisory
- GLSA-200611-18 vendor-advisory
- SUSE-SR:2006:005 vendor-advisory
- OpenPKG-SA-2006.005 vendor-advisory
- 16728 vdb-entry
- ADV-2006-0702 vdb-entry
- tin-offbyone-bo(24841) vdb-entry
- Debian Security Tracker CVE-2006-0804 vendor-advisory