CVE-2006-2409

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.9%

from disclosure to weapon0 days

Published on NVDMay 16

1st PoCMay 14

exploitation probability

0.9%top 43% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1784

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://aluigi.altervista.org/adv/raydiumx-adv.txt http://raydium.org/svn.php http://secunia.com/advisories/20097 http://securityreason.com/securityalert/900 https://exchange.xforce.ibmcloud.com/vulnerabilities/26514 http://www.securityfocus.com/archive/1/433930/100/0/threaded http://www.securityfocus.com/bid/17986 http://www.vupen.com/english/advisories/2006/1808