VDB
CVE-2006-3124
CVE-2006-3124
PUBLISHED
CVSS 7.5 HIGH
Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.
EPSS 20.12% · 97.4th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
20.12%
97.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| streamripper | streamripper | 1.61.24, 1.61.25 |
Timeline
- Aug 26, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Apr 15, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
References
- http://sourceforge.net/project/shownotes.php?release_id=442126 url
- 28178 vdb
- streamripper-httpheader-bo(28567) vdb
- 21749 third-party-advisory
- DSA-1158 vendor-advisory
- 21579 third-party-advisory
- 21658 third-party-advisory
- 21801 third-party-advisory
- 19707 vdb
- SUSE-SR:2006:021 vendor-advisory
- http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.c url
- GLSA-200609-01 vendor-advisory
- ADV-2006-3387 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2006-3124 advisory