CVE-2006-6876
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-6876
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SMS message, triggering memory corruption when the "beginning" buffer is copied to the third (pdu) argument.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenSER SMS处理模块缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenSER是一款开放源码的SIP服务器。 OpenSER的SMS处理模块存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 以下函数： int fetchsms(struct modem *mdm, int sim, char* pdu) 可能会导致内存破坏的情况。如果beginning被拷贝到函数参数PDU (char*)的话就会触发这个漏洞，导致执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-6876
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-6876
请登录查看更多情报信息。
Same Patch Batch · n/a · 2007-01-05 · 52 CVEs total
| CVE-2007-0085 | OpenBSD 'vga_pci.c'权限提升漏洞 | |
| CVE-2007-0059 | Apple Quicktime HREF Track(HREFTrack)跨站脚本攻击漏洞 | |
| CVE-2006-6870 | Avahi Compressed 'avahi-core/dns.c'DNS拒绝服务漏洞 | |
| CVE-2006-6875 | OpenSER OSP模块Validateospheader函数缓冲区溢出漏洞 | |
| CVE-2006-6879 | PHP-Update Admin 'Upload.PHP'任意文件上载漏洞 | |
| CVE-2006-6878 | PHP-Update 'Upload.PHP'rights[7]参数任意文件上载漏洞 | |
| CVE-2006-6877 | Matteo Lucarelli 3editor CMS 'index.php'目录遍历漏洞 | |
| CVE-2006-6880 | PHP-Update 'Guestadd.PHP'多个SQL注入漏洞 | |
| CVE-2003-1317 | eNdonesia Mod参数跨站脚本攻击（XSS）漏洞 | |
| CVE-2003-1316 | eNdonesia Mod参数路径泄露漏洞 | |
| CVE-2004-2670 | eNdonesia Search Form跨站脚本漏洞 | |
| CVE-2007-0084 | Windows NT Message Compiler MC 缓冲区溢出漏洞 | |
| CVE-2007-0083 | Nuked Klan 远程Cookie破解漏洞 | |
| CVE-2007-0082 | IMGallery 'Start.PHP' 任意文件上传漏洞 | |
| CVE-2007-0081 | Kerio可注入伪造iphlpapi DLL漏洞 | |
| CVE-2007-0080 | FreeRadius SMB_Connect_Server函数缓冲区溢出漏洞 | |
| CVE-2007-0079 | rblog 'admin.mdb'和'rblog.mdb' 访问控制漏洞 | |
| CVE-2007-0078 | BattleBlog 'blankmaster.mdb'权限许可和访问控制漏洞 | |
| CVE-2007-0077 | lblog 'admin/db/newFolder/'密码破解漏洞 | |
| CVE-2007-0076 | Openforum 'openforum.mdb'权限许可和访问控制漏洞 |
Showing top 20 of 52 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2006-6876
No comments yet