CVE-2006-3251

Опубликовано: 27 июн. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.

Ссылки

http://secunia.com/advisories/20800
Vendor Advisory
http://secunia.com/advisories/20846
Vendor Advisory
http://secunia.com/advisories/21146
Vendor Advisory
http://www.debian.org/security/2006/dsa-1114
http://www.gentoo.org/security/en/glsa/glsa-200606-25.xml
http://www.hashcash.org/source/CHANGELOG
http://www.securityfocus.com/bid/18659
Patch
http://www.vupen.com/english/advisories/2006/2551
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27422
http://secunia.com/advisories/20800
Vendor Advisory
http://secunia.com/advisories/20846
Vendor Advisory
http://secunia.com/advisories/21146
Vendor Advisory
http://www.debian.org/security/2006/dsa-1114
http://www.gentoo.org/security/en/glsa/glsa-200606-25.xml
http://www.hashcash.org/source/CHANGELOG
http://www.securityfocus.com/bid/18659
Patch
http://www.vupen.com/english/advisories/2006/2551
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27422

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hashcash:hashcash:*:*:*:*:*:*:*:*

Версия до 1.20 (включая)

cpe:2.3:a:hashcash:hashcash:1.00:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.01:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.02:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.03:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.04:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.05:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.06:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.07:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.08:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.09:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.10:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.11:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.12:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.13:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.14:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.15:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.16:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.17:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.18:*:*:*:*:*:*:*

cpe:2.3:a:hashcash:hashcash:1.19:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01938

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2006-3251

ubuntu

больше 19 лет назад

Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.

CVE-2006-3251

debian

больше 19 лет назад

Heap-based buffer overflow in the array_push function in hashcash.c fo ...

GHSA-f7fm-rw62-26cq

github

больше 3 лет назад

Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.

EPSS

Процентиль: 82%

0.01938

Низкий

7.5 High

CVSS2

Дефекты

CWE-119