CVE-2006-1236 - Vulnerability Details - OpenCVE

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Crossfire	Crossfire

Configuration 1 [-]

cpe:2.3:a:crossfire:crossfire:1.9.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log
http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html
http://secunia.com/advisories/19237
http://secunia.com/advisories/19276
http://www.debian.org/security/2006/dsa-1009
http://www.osvdb.org/23904
http://www.securityfocus.com/bid/17093
http://www.vupen.com/english/advisories/2006/0951
https://exchange.xforce.ibmcloud.com/vulnerabilities/25252
https://nvd.nist.gov/vuln/detail/CVE-2006-1236
https://www.cve.org/CVERecord?id=CVE-2006-1236
https://www.exploit-db.com/exploits/1582

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-03-15T00:00:00

Updated: 2024-08-07T17:03:28.702Z

Reserved: 2006-03-14T00:00:00

Link: CVE-2006-1236

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-03-15T00:02:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-1236

Redhat

Severity : Moderate

Publid Date: 2006-03-14T00:00:00Z

Links: CVE-2006-1236 - Bugzilla

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-03-14T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-08-18T16:06:35", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2006-0951", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/0951"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log"}, {"name": "19276", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19276"}, {"name": "1582", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/1582"}, {"name": "DSA-1009", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2006/dsa-1009"}, {"name": "19237", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19237"}, {"name": "17093", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17093"}, {"name": "23904", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/23904"}, {"name": "crossfire-setup-bo(25252)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25252"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-1236", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2006-0951", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/0951"}, {"name": "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log", "refsource": "CONFIRM", "url": "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log"}, {"name": "19276", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19276"}, {"name": "1582", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/1582"}, {"name": "DSA-1009", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2006/dsa-1009"}, {"name": "19237", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19237"}, {"name": "17093", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17093"}, {"name": "23904", "refsource": "OSVDB", "url": "http://www.osvdb.org/23904"}, {"name": "crossfire-setup-bo(25252)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25252"}, {"name": "http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:03:28.702Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2006-0951", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/0951"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log"}, {"name": "19276", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19276"}, {"name": "1582", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/1582"}, {"name": "DSA-1009", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2006/dsa-1009"}, {"name": "19237", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19237"}, {"name": "17093", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17093"}, {"name": "23904", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/23904"}, {"name": "crossfire-setup-bo(25252)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25252"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-1236", "datePublished": "2006-03-15T00:00:00", "dateReserved": "2006-03-14T00:00:00", "dateUpdated": "2024-08-07T17:03:28.702Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:crossfire:crossfire:1.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "C32B2D9E-86D3-4F4F-9C68-C7E5780F1C2B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010."}], "id": "CVE-2006-1236", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-03-15T00:02:00.000", "references": [{"source": "cve@mitre.org", "url": "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log"}, {"source": "cve@mitre.org", "url": "http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/19237"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/19276"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2006/dsa-1009"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/23904"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/17093"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/0951"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25252"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/1582"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/19237"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/19276"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2006/dsa-1009"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/23904"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/17093"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/0951"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25252"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/1582"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}