NeoEngine Format String And Denial Of Service Vulnerabilities

Bugtraq ID:	18696
Class:	Unknown
CVE:	CVE-2006-6226 CVE-2006-6227
Remote:	No
Local:	Yes
Published:	Jun 28 2006 12:00AM
Updated:	Mar 08 2007 03:35AM
Credit:	Luigi Auriemma is credited with the discovery of these vulnerabilities.
Vulnerable:	emedia-solutions-wolf.de NeoEngine 0.8.2 emedia-solutions-wolf.de NeoEngine CVS 3422
Not Vulnerable:

NeoEngine Format String And Denial Of Service Vulnerabilities

Multiple vulnerabilities exist in NeoEngine. As a result of a design error, the application fails to properly sanitize user-supplied input.

A successful attack may crash the application or lead to arbitrary code execution. This may help attackers deny service to legitimate users of the application, gain unauthorized access, or escalate privileges.

NeoEngine Format String And Denial Of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

NeoEngine Format String And Denial Of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: mailto:[email protected].

NeoEngine Format String And Denial Of Service Vulnerabilities

References:

• NeoEngine Multiple Vulnerabilities (Luigi Auriemma)
  
• NeoEngine Web Site (emedia-solutions-wolf.de)