FKIE_CVE-2006-2409

Vulnerability from fkie_nvd - Published: 2006-05-16 10:02 - Updated: 2026-06-16 22:24
Severity
Summary
Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add.
References
cve@mitre.orghttp://aluigi.altervista.org/adv/raydiumx-adv.txtVendor Advisory
cve@mitre.orghttp://raydium.org/svn.php
cve@mitre.orghttp://secunia.com/advisories/20097Patch, Vendor Advisory
cve@mitre.orghttp://securityreason.com/securityalert/900
cve@mitre.orghttp://www.securityfocus.com/archive/1/433930/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/17986
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/1808Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/26514
af854a3a-2127-422b-91ae-364da2661108http://aluigi.altervista.org/adv/raydiumx-adv.txtVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://raydium.org/svn.php
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20097Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/900
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/433930/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17986
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/1808Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/26514
Impacted products
Vendor Product Version
raydium raydium svn_revision_283
raydium raydium svn_revision_284
raydium raydium svn_revision_285
raydium raydium svn_revision_286
raydium raydium svn_revision_287
raydium raydium svn_revision_288
raydium raydium svn_revision_289
raydium raydium svn_revision_290
raydium raydium svn_revision_291
raydium raydium svn_revision_292
raydium raydium svn_revision_293
raydium raydium svn_revision_294
raydium raydium svn_revision_295
raydium raydium svn_revision_296
raydium raydium svn_revision_297
raydium raydium svn_revision_298
raydium raydium svn_revision_299
raydium raydium svn_revision_300
raydium raydium svn_revision_301
raydium raydium svn_revision_302
raydium raydium svn_revision_303
raydium raydium svn_revision_304
raydium raydium svn_revision_305
raydium raydium svn_revision_306
raydium raydium svn_revision_307
raydium raydium svn_revision_308
raydium raydium svn_revision_309
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD879750-83D9-40DE-BE9F-001AB975271C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB5DB6F8-E793-4274-BC1A-457A2130F40C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA11AEA4-EAB5-40AA-8719-94DD09D687A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A2FDAD6-C4FB-442F-98F2-5068576038B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F929617-CAAD-4634-9412-5C6A57995789",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:*",
              "matchCriteriaId": "EAC92ACF-9FFF-4305-A194-9B4A56DEC0F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:*",
              "matchCriteriaId": "48F301B1-428E-4B87-9107-268D5D3F5210",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB3F00C1-0C47-43A5-96D2-678B9E160316",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9FECC81-6C1E-4D20-958D-F8AE6E668792",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE2EF6F4-4B07-4593-A83A-0F5FAF15CAEC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:*",
              "matchCriteriaId": "22D790A0-AB22-4A1E-B1EF-E79F56335286",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:*",
              "matchCriteriaId": "8694C813-7402-4913-8667-2BA3BD00BEAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:*",
              "matchCriteriaId": "34CB7D08-CF9F-4BE5-98FD-704F6F979249",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7D75131-5359-4198-9A29-F05D08884566",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B8DCDC7-94BC-45A5-AC78-3B5B9E5E3155",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4B8BE2E-0407-420C-BE94-61B7E0A9A7A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:*",
              "matchCriteriaId": "5008EA2C-90F5-425D-93CF-0A78500AA5FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF314B62-DBE2-47B8-B8B6-8C9FE8BEEA90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:*",
              "matchCriteriaId": "D81B4B8C-FF55-4D46-88EC-70DFF58401A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:*",
              "matchCriteriaId": "69CE2D75-0A95-4624-B8DB-96C8A5DB97A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:*",
              "matchCriteriaId": "07B28972-B2CA-4DCC-87CF-203095510630",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:*",
              "matchCriteriaId": "57D6C13A-DFC1-4D66-9CC5-BAF5030BE066",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:*",
              "matchCriteriaId": "66A01459-1876-4642-A9FF-0D2CE4611F90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F5CC74C-D278-4677-953A-E95806CA06C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:*",
              "matchCriteriaId": "78A55F26-031E-4D42-A98B-1F03A71037EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7FBF3DD-2C92-4931-983D-3352165D1967",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C05005C-3860-4063-A81F-F8A69C1DC04C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add."
    }
  ],
  "id": "CVE-2006-2409",
  "lastModified": "2026-06-16T22:24:57.070",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-05-16T10:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://aluigi.altervista.org/adv/raydiumx-adv.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://raydium.org/svn.php"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20097"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/900"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/433930/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/17986"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/1808"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26514"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://aluigi.altervista.org/adv/raydiumx-adv.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://raydium.org/svn.php"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20097"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/900"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/433930/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17986"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/1808"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26514"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-134"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.