CVEvulnerability
CVE-2006-0224
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-01-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument (alternative configuration file name).
Affected configurations
• libast libast 0.4
• libast libast 0.5
• libast libast 0.6
• libast libast 0.6.1
References
- http://freshmeat.net/projects/libast/?branch_id=17907&release_id=217840 freshmeat.net
- http://secunia.com/advisories/18586 secunia.com
- http://secunia.com/advisories/18632 secunia.com
- http://secunia.com/advisories/18916 secunia.com
- http://securityreason.com/securityalert/373 securityreason.com
- http://www.debian.org/security/2006/dsa-976 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200601-14.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:029 www.mandriva.com
- http://www.osvdb.org/22735 www.osvdb.org
- http://www.rosiello.org/en/read_bugs.php?id=25 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/423088/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/423207/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/423366/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16350 Exploit
- http://www.vupen.com/english/advisories/2006/0314 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24303 exchange.xforce.ibmcloud.com
- http://freshmeat.net/projects/libast/?branch_id=17907&release_id=217840 freshmeat.net
- http://secunia.com/advisories/18586 secunia.com
- http://secunia.com/advisories/18632 secunia.com
- http://secunia.com/advisories/18916 secunia.com
- http://securityreason.com/securityalert/373 securityreason.com
- http://www.debian.org/security/2006/dsa-976 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200601-14.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:029 www.mandriva.com
- http://www.osvdb.org/22735 www.osvdb.org
- http://www.rosiello.org/en/read_bugs.php?id=25 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/423088/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/423207/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/423366/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16350 Exploit
- http://www.vupen.com/english/advisories/2006/0314 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24303 exchange.xforce.ibmcloud.com