CERTA-2006-AVI-115
Vulnerability from certfr_avis
Plusieurs vulnérabilités dans l'outil zoo permettent à un utilisateur mal intentionné d'exécuter du code arbitraire à distance.
Description
zoo est un outil de gestion d'archives écrit par Rahul Dhesi.
Plusieurs vulnérabilités dans l'outil zoo permettent à un utilisateur
mal intentionné d'exécuter du code arbitraire à distance au moyen d'une
archives malicieusement construite.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
zoo version 2.10 et versions antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003ezoo version 2.10 et versions ant\u00e9rieures.\u003c/p\u003e",
"content": "## Description\n\nzoo est un outil de gestion d\u0027archives \u00e9crit par Rahul Dhesi. \nPlusieurs vuln\u00e9rabilit\u00e9s dans l\u0027outil zoo permettent \u00e0 un utilisateur\nmal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance au moyen d\u0027une\narchives malicieusement construite.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2006-0855",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-0855"
}
],
"initial_release_date": "2006-03-16T00:00:00",
"last_revision_date": "2006-03-16T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200603-05 du 06 mars 2006 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 de Jean-S\u00e9bastien Guay-Leroux du 22 f\u00e9vrier 2006 :",
"url": "http://www.guay-leroux.com/projects/zoo-advisory.txt"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SR:2006:005 du 03 mars 2006 :",
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200603-12 du 16 mars 2006 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-12.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA 991 du 10 mars 2006 :",
"url": "http://www.debian.org/security/2006/dsa-991"
}
],
"reference": "CERTA-2006-AVI-115",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2006-03-16T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans l\u0027outil zoo permettent \u00e0 un utilisateur\nmal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
"title": "Plusieurs vuln\u00e9rabilit\u00e9s dans l\u0027outil zoo",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200603-05 du 06 mars 2006",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…