« Volver al listado

CVE-2006-4006

Estado: ModificadaMedia (5)—

The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the send_pkg function (packets.c) to use this data size when sending a reply, and allows remote attackers to read portions of server memory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Bomberclone — Bomberclone

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-4006",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-08-07T19:04:00.000",
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/bcloneboom-adv.txt",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.org/poc/bcloneboom.zip",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21303",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21985",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1180",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/27648",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/19255",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3067",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28092",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.altervista.org/adv/bcloneboom-adv.txt",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://aluigi.org/poc/bcloneboom.zip",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/21303",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/21985",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1180",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/27648",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/19255",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3067",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28092",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the send_pkg function (packets.c) to use this data size when sending a reply, and allows remote attackers to read portions of server memory."
    },
    {
      "lang": "es",
      "value": "La función do_gameinfo en BomberClone 0.11.6 y anteriores, y posiblemente otras funciones, no restablece el tamaño de información de paquete, lo cual provoca que la función send_pkg (packets.c) utilice este tamaño de información al enviar una respuesta, y permite a atacantes remotos leer porciones de la memoria del servidor."
    }
  ],
  "lastModified": "2026-06-16T22:28:14.820",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bomberclone:bomberclone:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6A2E984-618E-4A78-98D1-B56819F77DB7",
              "versionEndIncluding": "0.11.6"
            },
            {
              "criteria": "cpe:2.3:a:bomberclone:bomberclone:0.11.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F3DA93D-AC12-4E63-9E34-7543D9BDEAE3"
            },
            {
              "criteria": "cpe:2.3:a:bomberclone:bomberclone:0.11.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "327901F7-A47F-4D12-9FC3-83480751E353"
            },
            {
              "criteria": "cpe:2.3:a:bomberclone:bomberclone:0.11.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56AA0BE2-13EC-4186-8D7F-DFEF2697086E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}