CVE-2006-0855: rahul_dhesi zoo
Vulnerability summary
CVE-2006-0855 is a medium (CVSS 5.1) vulnerability in rahul_dhesi zoo. EPSS estimates a 4.54% chance of exploitation in the next 30 days, higher than 91.4% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 23-02-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.54%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.54% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (guay-leroux.com)
Maturity: unknown
Exploit Reference (guay-leroux.com)
Maturity: unknown
Exploit Reference (archives.neohapsis.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian1 product
- zoo< 2.10-9woody0 | < 2.10-11sarge0
Rahul_dhesi1 product
- zoo≤ 2.10
2 vendors · 2 products
References
21 linksShow all 21 references
- archives.neohapsis.com/archives/bugtraq/2006-04/0061.htmlMailing ListX Refsource BUGTRAQExploitVendor Advisory