CVE-2006-0855

Published: Feb 23, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.

Affected (1)

Products: Rahul Dhesi: Zoo

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rahul Dhesi Zoo	Up to 2.10

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (42)

http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/19002

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19130

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19148

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19166

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19408

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19514

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/546

Source: cve@mitre.org

http://securitytracker.com/id?1015668

Source: cve@mitre.org

http://securitytracker.com/id?1015866

Source: cve@mitre.org

Patch

http://www.debian.org/security/2006/dsa-991

Source: cve@mitre.org

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml

Source: cve@mitre.org

PatchVendor Advisory

http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.guay-leroux.com/projects/zoo-advisory.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.novell.com/linux/security/advisories/2006_05_sr.html

Source: cve@mitre.org

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_06_sr.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/425887/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16790

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0705

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/1220

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24904

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://secunia.com/advisories/19002

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19130

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19148

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19166

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19408

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19514

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securityreason.com/securityalert/546

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015668

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015866

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2006/dsa-991

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.guay-leroux.com/projects/zoo-advisory.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.novell.com/linux/security/advisories/2006_05_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_06_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/425887/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16790

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0705

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2006/1220

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24904

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.