CVEvulnerability
CVE-2006-2148
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple buffer overflows in client.c in CGI:IRC (CGIIRC) before 0.5.8 might allow remote attackers to execute arbitrary code via (1) cookies or (2) the query string.
Affected configurations
• cgiirc cgiirc 0.5.4
• cgiirc cgiirc 0.5.7
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365680 bugs.debian.org
- http://cvs.cgiirc.org/chngview?cn=263 Patch
- http://cvs.cgiirc.org/chngview?cn=283 cvs.cgiirc.org
- http://cvs.cgiirc.org/timeline?d=300&e=2006-Apr-30&c=2&px=&s=0&dm=1&x=1&m=1 cvs.cgiirc.org
- http://secunia.com/advisories/19922 Patch, Vendor Advisory
- http://secunia.com/advisories/19985 secunia.com
- http://www.debian.org/security/2006/dsa-1052 www.debian.org
- http://www.securityfocus.com/bid/17799 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1607 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26173 exchange.xforce.ibmcloud.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365680 bugs.debian.org
- http://cvs.cgiirc.org/chngview?cn=263 Patch
- http://cvs.cgiirc.org/chngview?cn=283 cvs.cgiirc.org
- http://cvs.cgiirc.org/timeline?d=300&e=2006-Apr-30&c=2&px=&s=0&dm=1&x=1&m=1 cvs.cgiirc.org
- http://secunia.com/advisories/19922 Patch, Vendor Advisory
- http://secunia.com/advisories/19985 secunia.com
- http://www.debian.org/security/2006/dsa-1052 www.debian.org
- http://www.securityfocus.com/bid/17799 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1607 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26173 exchange.xforce.ibmcloud.com