← back
CVE-2006-0855

CVE-2006-0855

EPSS 4.4%
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.htmlhttp://secunia.com/advisories/19002http://secunia.com/advisories/19130http://secunia.com/advisories/19148http://secunia.com/advisories/19166http://secunia.com/advisories/19408http://secunia.com/advisories/19514http://securityreason.com/securityalert/546http://securitytracker.com/id?1015668http://securitytracker.com/id?1015866https://exchange.xforce.ibmcloud.com/vulnerabilities/24904http://www.debian.org/security/2006/dsa-991