Unscored CVE-2006-5601 EUVD-2006-5586GHSA-w45p-5jm9-ww38

Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote …

Published Oct 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote authenticated users to execute arbitrary code via unspecified vectors.

References

http://open1x.cvs.sourceforge.net/open1x/xsupplicant/src/eap.c?r1=1.135&r2=1.136
20775 vdb-entry
22612 third-party-advisory
ADV-2006-4233 vdb-entry
xsupplicant-eapdo-bo(29902) vdb-entry
22641 third-party-advisory
SUSE-SR:2007:001 vendor-advisory
MDKSA-2006:189 vendor-advisory