CVE-2006-3506

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified vectors related to "processing a path name."

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.info.apple.com/article.html?artnum=304188Vendor Advisory
http://secunia.com/advisories/21551Patch, Vendor Advisory
http://securitytracker.com/id?1016711Patch
http://www.kb.cert.org/vuls/id/737204US Government Resource
http://www.osvdb.org/27994
http://www.securityfocus.com/bid/19579Patch
http://www.vupen.com/english/advisories/2006/3315
http://docs.info.apple.com/article.html?artnum=304188Vendor Advisory
http://secunia.com/advisories/21551Patch, Vendor Advisory
http://securitytracker.com/id?1016711Patch
http://www.kb.cert.org/vuls/id/737204US Government Resource
http://www.osvdb.org/27994
http://www.securityfocus.com/bid/19579Patch
http://www.vupen.com/english/advisories/2006/3315

Timeline

Published: Aug 21, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-35077.2Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attacker CVE-2006-35087.2Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial o CVE-2006-35097.2Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a d CVE-2006-35102.6The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial CVE-2006-35115.0Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts property of the Html CVE-2006-35125.0Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilte CVE-2006-35135.0danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data pr CVE-2006-35144.3Multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote a CVE-2006-35157.5SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL command CVE-2006-35167.5Multiple SQL injection vulnerabilities in FreeHost allow remote attackers to execute arbitrary SQL commands via (1) readme parameter to Free CVE-2006-35177.5PHP remote file inclusion vulnerability in stats.php in RW::Download, when register_globals is enabled, allows remote attackers to execute a CVE-2006-35187.5SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary SQL commands via the