« Volver al listado

CVE-2006-0224

Estado: ModificadaMedia (4.6)—

Desbordamiento de búfer en Library of Assorted Spiffy Things (LibAST) 0.6.1 y anteriores, usado en Eterm y posiblemente otros programas, permiten a usuarios locales ejecutar código de su elección como el usuario utmp mediante un argumento -X largo (nombre de fichero de configuración alternativo=

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Libast — Libast

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-0224",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-01-25T02:03:00.000",
  "references": [
    {
      "url": "http://freshmeat.net/projects/libast/?branch_id=17907&release_id=217840",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/18586",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/18632",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/18916",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/373",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-976",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200601-14.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:029",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/22735",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.rosiello.org/en/read_bugs.php?id=25",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/423088/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/423207/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/423366/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/16350",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/0314",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24303",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://freshmeat.net/projects/libast/?branch_id=17907&release_id=217840",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/18586",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/18632",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/18916",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/373",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-976",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200601-14.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:029",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/22735",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.rosiello.org/en/read_bugs.php?id=25",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/423088/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/423207/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/423366/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/16350",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/0314",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24303",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument (alternative configuration file name)."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en Library of Assorted Spiffy Things (LibAST) 0.6.1 y anteriores, usado en Eterm y posiblemente otros programas, permiten a usuarios locales ejecutar código de su elección como el usuario utmp mediante un argumento -X largo (nombre de fichero de configuración alternativo="
    }
  ],
  "lastModified": "2026-06-16T22:20:08.157",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libast:libast:0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E40B2722-86E9-4BB5-8FDF-D35CAD82D966"
            },
            {
              "criteria": "cpe:2.3:a:libast:libast:0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED69500A-FD6F-4E4F-A114-6E430ED89A1D"
            },
            {
              "criteria": "cpe:2.3:a:libast:libast:0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCD09411-CAA0-423A-A111-69A8B27227A3"
            },
            {
              "criteria": "cpe:2.3:a:libast:libast:0.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C24BE74-A42B-4856-AD50-7DC7AA9C9B57"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}