Unscored severity · published Feb 27, 2006
CVE-2006-0736
Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary…
–
CVSS
7.1%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LD
Linux Desktop · Novell
9 · source: NVD
OE
Open Enterprise Server · Novell
1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0736
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0736
secunia.com
http://secunia.com/advisories/18995
www.novell.com
http://www.novell.com/linux/security/advisories/2006_10_casa.html
www.securityfocus.com
http://www.securityfocus.com/bid/16779
www.vupen.com
http://www.vupen.com/english/advisories/2006/0693
More from Linux Desktop
7.8
CVE-2008-2812
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via…
7.0
CVE-2009-3547
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain…
5.5
CVE-2007-6716
fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as…
–
CVE-2009-2848
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial…
–
CVE-2008-5021
nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial…