How severe is CVE-2006-1269?

CVE-2006-1269 has a CVSS 2.0 base score of 6.2, rated medium severity.

Is CVE-2006-1269 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (58th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-1269?

CVE-2006-1269 affects Rahul Dhesi Zoo. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2006-1269?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2006-1269 published?

CVE-2006-1269 was published on 2006-03-19 and last updated on 2026-06-16.

CVE-2006-1269

CVE-2006-1269 is a medium-severity vulnerability in Rahul Dhesi Zoo with a CVSS 2.0 base score of 6.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 6.2)
EPSS exploit prediction: 1% (58th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Rahul Dhesi Zoo
Published: 2006-03-19
Last modified: 2026-06-16

Description

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive.

Frequently asked questions

What is CVE-2006-1269?: Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive.
How severe is CVE-2006-1269?: CVE-2006-1269 has a CVSS 2.0 base score of 6.2, rated medium severity.
Is CVE-2006-1269 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (58th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-1269?: CVE-2006-1269 affects Rahul Dhesi Zoo. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2006-1269?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2006-1269 published?: CVE-2006-1269 was published on 2006-03-19 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:rahul_dhesi:zoo:2.10:*:*:*:*:*:*:*

More vulnerabilities in Rahul Dhesi Zoo

CVE-2007-1673 — High (CVSS 7.8): unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of…
CVE-2006-0855 — Medium (CVSS 5.1): Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as…

All CVEs affecting Rahul Dhesi Zoo →