Published: 24/08/2006 Updated: 20/07/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 891

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in the sppp driver in FreeBSD 4.11 up to and including 6.1, NetBSD 2.0 up to and including 4.0 beta prior to 20060823, and OpenBSD 3.8 and 3.9 prior to 20060902 allows remote malicious users to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freebsd freebsd 4.11
netbsd netbsd 3.0
netbsd netbsd 4.0
freebsd freebsd 5.5
freebsd freebsd 6.0
freebsd freebsd 5.3
freebsd freebsd 5.4
openbsd openbsd 3.8
openbsd openbsd 3.9
freebsd freebsd 6.1
netbsd netbsd 2.0

PPPwn - PlayStation 4 PPPoE RCE PPPwn is a kernel remote code execution exploit for PlayStation 4 upto FW 1100 This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation Supported versions are: FW 900 FW 1100 more can be added (PRs are welcome) The exploit only prints PPPwned on your PS4 as a proof-of-concept In order to launch Mir

PPPwn - PlayStation 4 PPPoE RCE

PPPwn - PlayStation 4 PPPoE RCE PPPwn is a kernel remote code execution exploit for PlayStation 4 upto FW 1100 This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation Supported versions are: FW 900 FW 1100 more can be added (PRs are welcome) The exploit only prints PPPwned on your PS4 as a proof-of-concept In order to launch Mir

Jailbreak PS4 v9.00 - 11.00

PPPwn - PlayStation 4 PPPoE RCE PPPwn is a kernel remote code execution exploit for PlayStation 4 upto FW 1100 This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation Supported versions are: FW 900 FW 1100 more can be added (PRs are welcome) The exploit only prints PPPwned on your PS4 as a proof-of-concept In order to launch Mir

NVD-CWE-Other http://security.FreeBSD.org/advisories/FreeBSD-SA-06:18.ppp.asc http://security.FreeBSD.org/patches/SA-06:18/ppp4x.patch ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-019.txt.asc http://www.securityfocus.com/bid/19684 http://securitytracker.com/id?1016745 http://secunia.com/advisories/21587 http://www.openbsd.org/errata.html#sppp http://www.openbsd.org/errata38.html#sppp http://secunia.com/advisories/21731 https://exchange.xforce.ibmcloud.com/vulnerabilities/28562 https://nvd.nist.gov https://github.com/Naughtyangel103/PS4 https://github.com/TheOfficialFloW/PPPwn

CVE-2006-4304

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect