Vulnerability Details : CVE-2006-3251
Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2006-3251
Probability of exploitation activity in the next 30 days: 2.02%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 87 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-3251
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
[email protected] |
CWE ids for CVE-2006-3251
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: [email protected] (Primary)
References for CVE-2006-3251
-
http://www.debian.org/security/2006/dsa-1114
-
http://www.securityfocus.com/bid/18659
Patch
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/27422
-
http://www.hashcash.org/source/CHANGELOG
-
http://www.gentoo.org/security/en/glsa/glsa-200606-25.xml
-
http://www.vupen.com/english/advisories/2006/2551
Vendor Advisory
Products affected by CVE-2006-3251
- cpe:2.3:a:hashcash:hashcash:*:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.15:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.14:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.16:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.04:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.05:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.13:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.02:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.03:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.11:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.12:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.19:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.06:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.07:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.08:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.00:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.09:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.10:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.17:*:*:*:*:*:*:*
- cpe:2.3:a:hashcash:hashcash:1.18:*:*:*:*:*:*:*