CVE-2006-4304
- State
- Published
- Severity
- Not scored
- Published
- Aug 24, 2006
- Updated
- Aug 7, 2024
- Reserved
- Aug 22, 2006
Description
Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://security.freebsd.org/patches/SA-06:18/ppp4x.patch
- 19684vdb-entry
- sppp4-lcp-bo(28562)vdb-entry
- FreeBSD-SA-06:08vendor-advisory
- [3.8] 20060902 014: SECURITY FIX: September 2, 2006vendor-advisory
- 21731third-party-advisory
- 1016745vdb-entry
- [3.9] 20060902 009: SECURITY FIX: September 2, 2006vendor-advisory
- 21587third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.