LWN.net Logo

zoo: stack-based buffer overflow

Package(s):zoo CVE #(s):CVE-2006-0855
Created:March 7, 2006 Updated:March 16, 2006
Description: Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier allows user-complicit attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
Alerts:
Gentoo 200603-12 2006-03-16
Debian DSA-991-1 2006-03-10
Gentoo 200603-05 2006-03-06

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds