CVE-2006-0304

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the DHCP options field.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aluigi.altervista.org/adv/dualsbof-adv.txtExploit, Patch, Vendor Advisory
http://secunia.com/advisories/18486Patch, Vendor Advisory
http://securitytracker.com/id?1015495
http://www.securityfocus.com/bid/16298
http://www.vupen.com/english/advisories/2006/0245
https://exchange.xforce.ibmcloud.com/vulnerabilities/24191
http://aluigi.altervista.org/adv/dualsbof-adv.txtExploit, Patch, Vendor Advisory
http://secunia.com/advisories/18486Patch, Vendor Advisory
http://securitytracker.com/id?1015495
http://www.securityfocus.com/bid/16298
http://www.vupen.com/english/advisories/2006/0245
https://exchange.xforce.ibmcloud.com/vulnerabilities/24191

Timeline

Published: Jan 19, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-03057.5Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone running firmware 1.1.12 (051129) and CP-100E VoIP 802.11b Wireless Phone running firmw CVE-2006-03065.0The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARC CVE-2006-03075.0The DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup fo CVE-2006-03087.5PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allo CVE-2006-03094.0Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packe CVE-2006-03104.3Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the CVE-2006-03117.5SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username paramet CVE-2006-03125.0create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1.CVE-2006-03137.5Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unsp CVE-2006-03147.5PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct que CVE-2006-03155.8index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allo CVE-2006-031610.0Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and