certfr_avis - certa-2006-avi-115

CERTA-2006-AVI-115

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités dans l'outil zoo permettent à un utilisateur mal intentionné d'exécuter du code arbitraire à distance.

Description

zoo est un outil de gestion d'archives écrit par Rahul Dhesi.
Plusieurs vulnérabilités dans l'outil zoo permettent à un utilisateur mal intentionné d'exécuter du code arbitraire à distance au moyen d'une archives malicieusement construite.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

zoo version 2.10 et versions antérieures.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CVE-2006-0855 (GCVE-0-2006-0855)

Vulnerability from cvelistv5 – Published: 2006-02-23 21:00 – Updated: 2024-08-07 16:48

Summary

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://securitytracker.com/id?1015866	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/19408	third-party-advisoryx_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/19166	third-party-advisoryx_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
	http://www.vupen.com/english/advisories/2006/1220	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/19514	third-party-advisoryx_refsource_SECUNIA
	http://securityreason.com/securityalert/546	third-party-advisoryx_refsource_SREASON
	http://www.gentoo.org/security/en/glsa/glsa-20060…	vendor-advisoryx_refsource_GENTOO
	http://securitytracker.com/id?1015668	vdb-entryx_refsource_SECTRACK
	http://www.guay-leroux.com/projects/barracuda-adv…	x_refsource_MISC
	http://secunia.com/advisories/19130	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://www.vupen.com/english/advisories/2006/0705	vdb-entryx_refsource_VUPEN
	http://www.guay-leroux.com/projects/zoo-advisory.txt	x_refsource_MISC
	http://www.debian.org/security/2006/dsa-991	vendor-advisoryx_refsource_DEBIAN
	http://archives.neohapsis.com/archives/bugtraq/20…	mailing-listx_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/425887/100…	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/19002	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/19148	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/16790	vdb-entryx_refsource_BID

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:48:56.934Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015866",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015866"
          },
          {
            "name": "19408",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19408"
          },
          {
            "name": "SUSE-SR:2006:005",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
          },
          {
            "name": "19166",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19166"
          },
          {
            "name": "SUSE-SR:2006:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_06_sr.html"
          },
          {
            "name": "ADV-2006-1220",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1220"
          },
          {
            "name": "19514",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19514"
          },
          {
            "name": "546",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/546"
          },
          {
            "name": "GLSA-200603-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml"
          },
          {
            "name": "1015668",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015668"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt"
          },
          {
            "name": "19130",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19130"
          },
          {
            "name": "zoo-misc-bo(24904)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24904"
          },
          {
            "name": "ADV-2006-0705",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0705"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.guay-leroux.com/projects/zoo-advisory.txt"
          },
          {
            "name": "DSA-991",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-991"
          },
          {
            "name": "20060403 Barracuda ZOO archiver security bug leads to remote compromise",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html"
          },
          {
            "name": "20060223 zoo contains exploitable buffer overflows",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/425887/100/0/threaded"
          },
          {
            "name": "19002",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19002"
          },
          {
            "name": "19148",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19148"
          },
          {
            "name": "16790",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16790"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-02-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1015866",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015866"
        },
        {
          "name": "19408",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19408"
        },
        {
          "name": "SUSE-SR:2006:005",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
        },
        {
          "name": "19166",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19166"
        },
        {
          "name": "SUSE-SR:2006:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_06_sr.html"
        },
        {
          "name": "ADV-2006-1220",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1220"
        },
        {
          "name": "19514",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19514"
        },
        {
          "name": "546",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/546"
        },
        {
          "name": "GLSA-200603-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml"
        },
        {
          "name": "1015668",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015668"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt"
        },
        {
          "name": "19130",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19130"
        },
        {
          "name": "zoo-misc-bo(24904)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24904"
        },
        {
          "name": "ADV-2006-0705",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0705"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.guay-leroux.com/projects/zoo-advisory.txt"
        },
        {
          "name": "DSA-991",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-991"
        },
        {
          "name": "20060403 Barracuda ZOO archiver security bug leads to remote compromise",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html"
        },
        {
          "name": "20060223 zoo contains exploitable buffer overflows",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/425887/100/0/threaded"
        },
        {
          "name": "19002",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19002"
        },
        {
          "name": "19148",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19148"
        },
        {
          "name": "16790",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16790"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0855",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015866",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015866"
            },
            {
              "name": "19408",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19408"
            },
            {
              "name": "SUSE-SR:2006:005",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
            },
            {
              "name": "19166",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19166"
            },
            {
              "name": "SUSE-SR:2006:006",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_06_sr.html"
            },
            {
              "name": "ADV-2006-1220",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1220"
            },
            {
              "name": "19514",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19514"
            },
            {
              "name": "546",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/546"
            },
            {
              "name": "GLSA-200603-05",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml"
            },
            {
              "name": "1015668",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015668"
            },
            {
              "name": "http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt",
              "refsource": "MISC",
              "url": "http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt"
            },
            {
              "name": "19130",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19130"
            },
            {
              "name": "zoo-misc-bo(24904)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24904"
            },
            {
              "name": "ADV-2006-0705",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0705"
            },
            {
              "name": "http://www.guay-leroux.com/projects/zoo-advisory.txt",
              "refsource": "MISC",
              "url": "http://www.guay-leroux.com/projects/zoo-advisory.txt"
            },
            {
              "name": "DSA-991",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-991"
            },
            {
              "name": "20060403 Barracuda ZOO archiver security bug leads to remote compromise",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html"
            },
            {
              "name": "20060223 zoo contains exploitable buffer overflows",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/425887/100/0/threaded"
            },
            {
              "name": "19002",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19002"
            },
            {
              "name": "19148",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19148"
            },
            {
              "name": "16790",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16790"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0855",
    "datePublished": "2006-02-23T21:00:00",
    "dateReserved": "2006-02-23T00:00:00",
    "dateUpdated": "2024-08-07T16:48:56.934Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted