FKIE_CVE-2006-0056

Vulnerability from fkie_nvd - Published: 2006-02-13 11:06 - Updated: 2026-06-16 22:19
Severity
Summary
Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer that was created by the pam_get_item function. NOTE: this issue only occurs in certain configurations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules before PAM-MySQL.
References
cret@cert.orghttp://jvn.jp/cert/JVNVU%23693909/index.html
cret@cert.orghttp://secunia.com/advisories/18598Patch, Vendor Advisory
cret@cert.orghttp://secunia.com/advisories/20690Vendor Advisory
cret@cert.orghttp://securitytracker.com/id?1015603Patch
cret@cert.orghttp://sourceforge.net/forum/forum.php?forum_id=499394
cret@cert.orghttp://www.gentoo.org/security/en/glsa/glsa-200606-18.xml
cret@cert.orghttp://www.kb.cert.org/vuls/id/693909Patch, Third Party Advisory, US Government Resource
cret@cert.orghttp://www.osvdb.org/22994
cret@cert.orghttp://www.osvdb.org/22995
cret@cert.orghttp://www.securityfocus.com/bid/16564Patch
cret@cert.orghttp://www.vupen.com/english/advisories/2006/0490
af854a3a-2127-422b-91ae-364da2661108http://jvn.jp/cert/JVNVU%23693909/index.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/18598Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20690Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015603Patch
af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/forum/forum.php?forum_id=499394
af854a3a-2127-422b-91ae-364da2661108http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/693909Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/22994
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/22995
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/16564Patch
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/0490
Impacted products
Vendor Product Version
pam-mysql pam-mysql 0.1
pam-mysql pam-mysql 0.2
pam-mysql pam-mysql 0.3
pam-mysql pam-mysql 0.4
pam-mysql pam-mysql 0.4.7
pam-mysql pam-mysql 0.5
pam-mysql pam-mysql 0.6
pam-mysql pam-mysql 0.7_pre1
pam-mysql pam-mysql 0.7_pre2
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cret@cert.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "89B29AFD-6EA6-4AEE-83F7-94AE927C5AEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3BFC22D-75CF-4104-87D1-E71CB054905E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0B82080-5499-46A8-8F3A-EB9BAB36C5B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C87D5EFC-27F3-4F37-87CA-AC120C9A9D89",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D23FBC9-0628-4CF2-AB25-0FC59FE539DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "425E4F3B-4B28-4283-ACD5-494BEE2A1866",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "0530FA7E-BD7A-4D5F-A3F5-3A7BD6C37030",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.7_pre1:*:*:*:*:*:*:*",
              "matchCriteriaId": "52E62A7D-FD21-484D-89D2-DDC398A18CEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pam-mysql:pam-mysql:0.7_pre2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CE9F00A-6938-487C-AC29-61AF37A25B12",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer that was created by the pam_get_item function.  NOTE: this issue only occurs in certain configurations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules before PAM-MySQL."
    }
  ],
  "id": "CVE-2006-0056",
  "lastModified": "2026-06-16T22:19:48.560",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-02-13T11:06:00.000",
  "references": [
    {
      "source": "cret@cert.org",
      "url": "http://jvn.jp/cert/JVNVU%23693909/index.html"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18598"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20690"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1015603"
    },
    {
      "source": "cret@cert.org",
      "url": "http://sourceforge.net/forum/forum.php?forum_id=499394"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/693909"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.osvdb.org/22994"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.osvdb.org/22995"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/16564"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.vupen.com/english/advisories/2006/0490"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvn.jp/cert/JVNVU%23693909/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18598"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20690"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1015603"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sourceforge.net/forum/forum.php?forum_id=499394"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/693909"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/22994"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/22995"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/16564"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0490"
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.