CVE-2006-0681

Power Daemon <2.0.2 - RCE

Title source: llm

Description

Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the WHATIDO variable.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Gotfault Security · cremotelinux

https://www.exploit-db.com/exploits/1486

View Code ZIP pw:eip

References (5)

[Vendor Advisory] http://secunia.com/advisories/18841

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/16582

[Vendor Advisory] http://gotfault.net/research/advisory/gadv-powerd.txt

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/24713

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/0545

Scores

EPSS 0.1237

EPSS Percentile 93.9%

Details

Status published

Products (5)

power_daemon/power_daemon 2.0.0

power_daemon/power_daemon 2.0.0.1

power_daemon/power_daemon 2.0.1

power_daemon/power_daemon 2.0.1.1

power_daemon/power_daemon 2.0.2

Published Feb 15, 2006

Tracked Since Feb 18, 2026