FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-0047

This CVE name corresponds to:

Entered Topic
2006-09-26 freeciv -- Packet Parsing Denial of Service Vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2006-0047
Phase Assigned(20051228)

Description

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values.

References

Source Reference
BUGTRAQ 20060306 Out of memory crash in Freeciv 2.0.7
CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=355211
DEBIAN DSA-994
GENTOO GLSA-200603-11
MANDRIVA MDKSA-2006:053
BID 16975
VUPEN ADV-2006-0838
SECUNIA 19120
SECUNIA 19253
SECUNIA 19227
XF freeciv-packets-dos(25166)