CVE-2006-2409 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 58)
Patch early
A public exploit exists.
Description
Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 0.89% — more likely to be exploited than 58% of all CVEs |
| Weakness | CWE-134 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-05-16 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| raydium | raydium |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | raydium svn 309 - Multiple Vulnerabilities | 2006-05-14 |
References
- http://aluigi.altervista.org/adv/raydiumx-adv.txt
- http://raydium.org/svn.php
- http://secunia.com/advisories/20097
- http://securityreason.com/securityalert/900
- http://www.securityfocus.com/archive/1/433930/100/0/threaded
- http://www.securityfocus.com/bid/17986
- http://www.vupen.com/english/advisories/2006/1808
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26514
- http://aluigi.altervista.org/adv/raydiumx-adv.txt
- http://raydium.org/svn.php
- http://secunia.com/advisories/20097
- http://securityreason.com/securityalert/900
- http://www.securityfocus.com/archive/1/433930/100/0/threaded
- http://www.securityfocus.com/bid/17986
- http://www.vupen.com/english/advisories/2006/1808
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26514
→ the Explorer · watch your stack · NVD