CVE-2006-0855
Fixed in a distro release EPSS 5%
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
Products: rahul_dhesi zoo
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | zoo | 2.10-9woody0 |
| Debian 3.1 | zoo | 2.10-11sarge0 |
| openSUSE Tumbleweed | zoo | 2.10-1025.8 |