CVE-2006-1269
Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments,...
- Published
- Mar 19, 2006
- Updated
- Aug 7, 2024
- Assigning CNA
- mitre
- Evidence observed
- Mar 16, 2006
Primary CVSS
nvd · CVSS 2.0
AV:L/AC:H/Au:N/C:C/I:C/A:CLow · next 30 days
- Percentile
- 62.6%
- Model date
- Oct 14, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive.
Sources
Josh Bressers · linux · Mar 16, 2006
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.