CVE-2006-5601
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.2%
Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote authenticated users to execute arbitrary code via unspecified vectors.
Affected products
n/a · n/aReferences
http://open1x.cvs.sourceforge.net/open1x/xsupplicant/src/eap.c?r1=1.135&r2=1.136http://secunia.com/advisories/22612http://secunia.com/advisories/22641https://exchange.xforce.ibmcloud.com/vulnerabilities/29902http://www.mandriva.com/security/advisories?name=MDKSA-2006:189http://www.novell.com/linux/security/advisories/2007_01_sr.htmlhttp://www.securityfocus.com/bid/20775http://www.vupen.com/english/advisories/2006/4233