« Volver al listado

CVE-2006-4005

Estado: ModificadaMedia (5)—

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain malformed PKGF_ackreq packet, which triggers a crash in the rscache_add() function in pkgcache.c; and (2) an error packet, which is intended to be received by clients and force client shutdown, but also triggers server shutdown.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Bomberclone — Bomberclone

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-4005",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-08-07T19:04:00.000",
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/bcloneboom-adv.txt",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.org/poc/bcloneboom.zip",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21303",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21985",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1180",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/27647",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/27649",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/19255",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3067",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28090",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28093",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.altervista.org/adv/bcloneboom-adv.txt",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://aluigi.org/poc/bcloneboom.zip",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/21303",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/21985",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1180",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/27647",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/27649",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/19255",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3067",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28090",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28093",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain malformed PKGF_ackreq packet, which triggers a crash in the rscache_add() function in pkgcache.c; and (2) an error packet, which is intended to be received by clients and force client shutdown, but also triggers server shutdown."
    },
    {
      "lang": "es",
      "value": "BomberClone 0.11.6 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante (1) un cierto paquete PKGF_ackreq mal formado, lo cual provoca una caída en la función rscache_add() en pkgcache.c; y (2) un paquete de error, el cual está destinado a ser recibido por clientes y fuerza el apagado del cliente, pero también provoca el apagado del servidor."
    }
  ],
  "lastModified": "2026-06-16T22:28:14.687",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bomberclone:bomberclone:0.11.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F3DA93D-AC12-4E63-9E34-7543D9BDEAE3"
            },
            {
              "criteria": "cpe:2.3:a:bomberclone:bomberclone:0.11.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "327901F7-A47F-4D12-9FC3-83480751E353"
            },
            {
              "criteria": "cpe:2.3:a:bomberclone:bomberclone:0.11.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56AA0BE2-13EC-4186-8D7F-DFEF2697086E"
            },
            {
              "criteria": "cpe:2.3:a:bomberclone:bomberclone:0.11.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACC129DF-B419-4DA5-A5E4-0C1C1DDAF2AE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}