CVE-2006-4438

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/09/2006 Updated: 08/03/2011

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 645

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote malicious users to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.

Vulnerable Product	Search on Vulmon	Subscribe to Product
doctor web ltd dr.web

/******************************************************************** stetoscopec: DrWeb 433 antivirus LHA directory name heap overflow for linux - Howto: Find a valid GOT entry to hijack with objdump -R /opt/drweb/drweb I guess that you can use the address of free(), but my exploit uses the address of realpath() There was a NULL byte ...

NVD-CWE-Other http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html http://secunia.com/advisories/22019 http://www.securityfocus.com/bid/20119 http://www.vupen.com/english/advisories/2006/3719 https://nvd.nist.gov https://www.exploit-db.com/exploits/2404/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-4438

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect