CVEs-PoC/2006/CVE-2006-2555.md

CVE-2006-2555

Description

The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a command with a missing ":" (colon) separator, which triggers a null dereference.

POC

Reference

• http://aluigi.altervista.org/adv/genecysbof-adv.txt
• http://aluigi.altervista.org/adv/genecysbof-adv.txt
• http://securityreason.com/securityalert/944
• http://securityreason.com/securityalert/944

Github

No PoCs found on GitHub currently.