CVE-2006-5461

Published: Nov 14, 2006Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.

Affected (1)

Products: Avahi: Avahi

Avahi

1 product

Avahi

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Avahi Avahi	Up to 0.6.14

References (30)

http://avahi.org/milestone/Avahi%200.6.15

Source: secalert@redhat.com

http://secunia.com/advisories/22807

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22852

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22932

Source: secalert@redhat.com

http://secunia.com/advisories/23020

Source: secalert@redhat.com

http://secunia.com/advisories/23042

Source: secalert@redhat.com

http://securitytracker.com/id?1017257

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200611-13.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:215

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_26_sr.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/21016

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4474

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/30207

Source: secalert@redhat.com

https://tango.0pointer.de/pipermail/avahi-tickets/2006-November/000320.html

Source: secalert@redhat.com

https://usn.ubuntu.com/380-1/

Source: secalert@redhat.com

http://avahi.org/milestone/Avahi%200.6.15