« Volver al listado

CVE-2006-6664

Estado: ModificadaMedia (5)—

Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp. NOTE: some details were obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Marathon Aleph ONE — Marathon Aleph ONE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6664",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-12-20T23:28:00.000",
  "references": [
    {
      "url": "http://marathon.sourceforge.net/release-notes/20061202.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23380",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=471964",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=471971",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/5064",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marathon.sourceforge.net/release-notes/20061202.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23380",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=471964",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=471971",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/5064",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp.  NOTE: some details were obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el formato de cadenas en el Marathon Aleph One en versiones anteriores a la  0.17.1 y 2006-12-17 puede permitir a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o ejecutar código de su elección mediante cadenas de formato especificadas en la función TopLevelLogger::logMessageV del Misc/Logging.cpp. NOTA: algunos de los detalles se obtienen a partir de la información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:33:33.637",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:marathon_aleph_one:marathon_aleph_one:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3856A34-00DD-4949-95DB-6E8D958DE78A",
              "versionEndIncluding": "0.17"
            },
            {
              "criteria": "cpe:2.3:a:marathon_aleph_one:marathon_aleph_one:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A2D65EE-77ED-48D5-84AE-A4CE0FE456DA",
              "versionEndIncluding": "2006-12-02"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}