CVE-2006-3492 - The CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and ear

CVE-2006-3492

Summary

The CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote attackers to cause a denial of service (application crash) via a message with an incorrect "object key", which triggers an assert error.

References

Vulnerable Configurations

cpe:2.3:a:mico:mico:2.3.12:*:*:*:*:*:*:*
cpe:2.3:a:mico:mico:2.3.12:*:*:*:*:*:*:*
cpe:2.3:a:mico:mico:2.3.12_rc3:*:*:*:*:*:*:*
cpe:2.3:a:mico:mico:2.3.12_rc3:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 18-10-2018 - 16:47)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	18869
bugtraq	20060706 Mico crashes when contected with wrong IOR / DoS 20060709 Re: Mico crashes when contected with wrong IOR / DoS 20060710 Re: Mico crashes when contected with wrong IOR / DoS
confirm	http://mico.org/down.html
fulldisc	20060706 Mico crashes when contected with wrong IOR / DoS
osvdb	27029
secunia	20970
sreason	1210
vupen	ADV-2006-2709
xf	mico-setanswerinvoke-dos(27686)

Last major update

18-10-2018 - 16:47

Published

10-07-2006 - 22:05

Last modified

18-10-2018 - 16:47