{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-08-20T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-10T00:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "DSA-1186", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2006/dsa-1186"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645"}, {"name": "21601", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21601"}, {"name": "cscope-cscopelists-bo(28545)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28545"}, {"name": "RHSA-2009:1101", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2009-1101.html"}, {"name": "28135", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28135"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500"}, {"name": "22239", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22239"}, {"name": "22515", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22515"}, {"name": "ADV-2006-3374", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/3374"}, {"name": "oval:org.mitre.oval:def:9661", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500"}, {"name": "19686", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19686"}, {"name": "19687", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19687"}, {"name": "GLSA-200610-08", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200610-08.xml"}, {"name": "28136", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28136"}, {"name": "cscope-reffile-bo(28546)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28546"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-4262", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "DSA-1186", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2006/dsa-1186"}, {"name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645"}, {"name": "21601", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21601"}, {"name": "cscope-cscopelists-bo(28545)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28545"}, {"name": "RHSA-2009:1101", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2009-1101.html"}, {"name": "28135", "refsource": "OSVDB", "url": "http://www.osvdb.org/28135"}, {"name": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500", "refsource": "CONFIRM", "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500"}, {"name": "22239", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22239"}, {"name": "22515", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22515"}, {"name": "ADV-2006-3374", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/3374"}, {"name": "oval:org.mitre.oval:def:9661", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661"}, {"name": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500", "refsource": "CONFIRM", "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500"}, {"name": "19686", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19686"}, {"name": "19687", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19687"}, {"name": "GLSA-200610-08", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200610-08.xml"}, {"name": "28136", "refsource": "OSVDB", "url": "http://www.osvdb.org/28136"}, {"name": "cscope-reffile-bo(28546)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28546"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T19:06:06.603Z"}, "title": "CVE Program Container", "references": [{"name": "DSA-1186", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2006/dsa-1186"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645"}, {"name": "21601", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21601"}, {"name": "cscope-cscopelists-bo(28545)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28545"}, {"name": "RHSA-2009:1101", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2009-1101.html"}, {"name": "28135", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28135"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500"}, {"name": "22239", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22239"}, {"name": "22515", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22515"}, {"name": "ADV-2006-3374", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/3374"}, {"name": "oval:org.mitre.oval:def:9661", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500"}, {"name": "19686", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19686"}, {"name": "19687", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19687"}, {"name": "GLSA-200610-08", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200610-08.xml"}, {"name": "28136", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28136"}, {"name": "cscope-reffile-bo(28546)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28546"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-4262", "datePublished": "2006-08-23T10:00:00", "dateReserved": "2006-08-21T00:00:00", "dateUpdated": "2024-08-07T19:06:06.603Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cscope:cscope:*:*:*:*:*:*:*:*", "matchCriteriaId": "7D9324B0-3391-4D44-AA10-FAF870445F0E", "versionEndIncluding": "15.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en cscope 15.5 y anetriores permiten a atacantes con la intervenci\u00f3n del usuario provocar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de m\u00faltiples vectores que incluyen (1) un nombre de ruta largo que no se maneja adecuadamente durante el an\u00e1lisis de la lista de archivos, (2) nombres largos de ruta que resultan de la expansi\u00f3n de rutas variables como la expansi\u00f3n de la \"tilde\" para la variable de entorno HOME, y (3) un argumento de l\u00ednea de comandos -f (o reffile) largo."}], "id": "CVE-2006-4262", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2006-08-23T10:04:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21601"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22239"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22515"}, {"source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-200610-08.xml"}, {"source": "cve@mitre.org", "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500"}, {"source": "cve@mitre.org", "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2006/dsa-1186"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28135"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28136"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2009-1101.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/19686"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/19687"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/3374"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28545"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28546"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21601"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22239"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22515"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-200610-08.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2006/dsa-1186"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28135"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28136"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2009-1101.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/19686"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/19687"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/3374"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28545"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28546"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661"}], "sourceIdentifier": "cve@mitre.org", "vendorComments": [{"comment": "Red Hat Enterprise Linux 5 was not vulnerable to this issue as it contained a backported patch since its first release.\n\nIn Red Hat Enterprise Linux 3 and 4, this issue was addressed via: https://rhn.redhat.com/errata/RHSA-2009-1101.html", "lastModified": "2009-06-16T00:00:00", "organization": "Red Hat"}], "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2009:1101", "cpe": "cpe:/o:redhat:enterprise_linux:3", "package": "cscope-0:15.5-16.RHEL3", "product_name": "Red Hat Enterprise Linux 3", "release_date": "2009-06-15T00:00:00Z"}, {"advisory": "RHSA-2009:1101", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "cscope-0:15.5-10.RHEL4.3", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2009-06-15T00:00:00Z"}], "bugzilla": {"description": "cscope: multiple buffer overflows", "id": "203645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=203645"}, "csaw": false, "cvss": {"cvss_base_score": "3.7", "cvss_scoring_vector": "AV:L/AC:H/Au:N/C:P/I:P/A:P", "status": "verified"}, "details": ["Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument."], "name": "CVE-2006-4262", "public_date": "2006-08-20T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2006-4262\nhttps://nvd.nist.gov/vuln/detail/CVE-2006-4262"], "statement": "Red Hat Enterprise Linux 5 was not vulnerable to this issue as it contained a backported patch since its first release.", "threat_severity": "Low"}