{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-08-06T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20060806 Multiple vulnerabilities in DConnect Daemon 0.7.0 (CVS 30 Jul 2006)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/442440/100/0/threaded"}, {"name": "ADV-2006-3181", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/3181"}, {"name": "dconnect-daemon-privmsg-pubmsg-format-string(28280)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28280"}, {"name": "21384", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21384"}, {"name": "1377", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1377"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.dc.ds.pg.gda.pl/"}, {"name": "1016641", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016641"}, {"name": "19371", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19371"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-4127", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20060806 Multiple vulnerabilities in DConnect Daemon 0.7.0 (CVS 30 Jul 2006)", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/442440/100/0/threaded"}, {"name": "ADV-2006-3181", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/3181"}, {"name": "dconnect-daemon-privmsg-pubmsg-format-string(28280)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28280"}, {"name": "21384", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21384"}, {"name": "1377", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1377"}, {"name": "http://www.dc.ds.pg.gda.pl/", "refsource": "CONFIRM", "url": "http://www.dc.ds.pg.gda.pl/"}, {"name": "1016641", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016641"}, {"name": "19371", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19371"}, {"name": "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog", "refsource": "CONFIRM", "url": "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:57:46.164Z"}, "title": "CVE Program Container", "references": [{"name": "20060806 Multiple vulnerabilities in DConnect Daemon 0.7.0 (CVS 30 Jul 2006)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/442440/100/0/threaded"}, {"name": "ADV-2006-3181", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/3181"}, {"name": "dconnect-daemon-privmsg-pubmsg-format-string(28280)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28280"}, {"name": "21384", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21384"}, {"name": "1377", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1377"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.dc.ds.pg.gda.pl/"}, {"name": "1016641", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016641"}, {"name": "19371", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19371"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-4127", "datePublished": "2006-08-14T23:00:00", "dateReserved": "2006-08-14T00:00:00", "dateUpdated": "2024-08-07T18:57:46.164Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dconnect:dconnect_daemon:0.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "C29EACF1-C006-4819-8E24-FDC6CC1BA321", "vulnerable": true}, {"criteria": "cpe:2.3:a:dconnect:dconnect_daemon:0.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "6A6E6F96-90F3-47CA-B6F6-B88A96A7709A", "vulnerable": true}, {"criteria": "cpe:2.3:a:dconnect:dconnect_daemon:0.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "B64776EF-2736-4542-B64C-BDD413E1F91B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de cadena de formato en DConnect Daemon 0.7.0 y anteriores permiten a administradore remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante especificadores de cadena de formato que no son manejados adecuadamente al llamar a las funciones (1) privmsg() o (2) pubmsg desde (a) cmd.user.c, (b) penalties.c, o (c) cmd.dc.c."}], "evaluatorSolution": "Successful exploitation of this vulnerability requires superior user or administrator privileges.\r\nThis vulnerability is addressed in the following product release:\r\nDConnect, DConnect Daemon, 0.7.1", "id": "CVE-2006-4127", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-08-14T23:04:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21384"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1377"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1016641"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.dc.ds.pg.gda.pl/"}, {"source": "cve@mitre.org", "url": "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/442440/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch"], "url": "http://www.securityfocus.com/bid/19371"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/3181"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28280"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21384"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/1377"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1016641"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.dc.ds.pg.gda.pl/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/442440/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch"], "url": "http://www.securityfocus.com/bid/19371"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/3181"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28280"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}