Vulnerabilities > CVE-2006-4438 - Unspecified vulnerability in Doctor web LTD Dr.Web
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN doctor-web-ltd
exploit available
Summary
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Dr.Web Antivirus 4.33 (LHA long directory name) Local Overflow Exploit. CVE-2006-4438. Local exploit for linux platform |
| id | EDB-ID:2404 |
| last seen | 2016-01-31 |
| modified | 2006-09-20 |
| published | 2006-09-20 |
| reporter | Guay-Leroux |
| source | https://www.exploit-db.com/download/2404/ |
| title | Dr.Web Antivirus 4.33 LHA long directory name Local Overflow Exploit |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
- http://secunia.com/advisories/22019
- http://secunia.com/advisories/22019
- http://www.securityfocus.com/bid/20119
- http://www.securityfocus.com/bid/20119
- http://www.vupen.com/english/advisories/2006/3719
- http://www.vupen.com/english/advisories/2006/3719