CVE-2006-1269: rahul_dhesi zoo
Vulnerability summary
CVE-2006-1269 is a medium (CVSS 6.2) vulnerability in rahul_dhesi zoo. EPSS estimates a 1.02% chance of exploitation in the next 30 days, higher than 62.8% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 19-03-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.02%
Chance of exploitation in the next 30 days
Percentile
63%
Versus all other CVEs
30-day change
0.00 pp
From 1.02% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Exploit Reference (gentoo.org)
Maturity: unknown
Exploit Reference (secunia.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Rahul_dhesi1 product
- zoo2.10
1 vendor · 1 product