CVE-2006-4250

Debian Linux - Buffer Overflow via -H Flag

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4250. PoCs published by Daniel Roethlisberger.

AI-analyzed exploit summary This PoC exploits a local buffer overflow in the Omnikey Cardman 4040 driver by writing a large buffer to /dev/cmx0. It demonstrates the vulnerability but does not include shellcode or a reverse shell.

Description

Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Daniel Roethlisberger · clocallinux

https://www.exploit-db.com/exploits/29822

View Code ZIP pw:eip

This PoC exploits a local buffer overflow in the Omnikey Cardman 4040 driver by writing a large buffer to /dev/cmx0. It demonstrates the vulnerability but does not include shellcode or a reverse shell.

Classification

Working Poc 90%

Attack Type

Lpe

Complexity

Trivial

Reliability

Theoretical

Target: Omnikey Cardman 4040 driver

No auth needed

Prerequisites: Access to /dev/cmx0 device file

MITRE ATT&CK