BomberClone 0.11.6 and earlier allows remote attackers to cause a...
Vulnerability Description
BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain malformed PKGF_ackreq packet, which triggers a crash in the rscache_add() function in pkgcache.c; and (2) an error packet, which is intended to be received by clients and force client shutdown, but also triggers server shutdown.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4005
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/21303
- http://www.securityfocus.com/bid/19255
- http://www.osvdb.org/27647
- http://www.debian.org/security/2006/dsa-1180
- http://aluigi.org/poc/bcloneboom.zip
- http://www.osvdb.org/27649
- http://aluigi.altervista.org/adv/bcloneboom-adv.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28090
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28093
- http://www.vupen.com/english/advisories/2006/3067
- http://secunia.com/advisories/21985
Affected Vendor
bomberclone
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.