CVE-2006-2072

MEDIUM 5.0CVE-2006-2072 · Published 27/04/2006 · updated 16/06/2026

In short

CVE-2006-2072 is a MEDIUM (CVSS 5.0) vulnerability affecting delegate (delegate).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 86.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
delegate delegate	`= 7.7.0= 7.7.1= 7.8.0= 7.8.1= 7.8.2= 7.9.11= 8.10= 8.10.1= 8.10.2= 8.10.3= 8.10.4= 8.10.5= 8.10.6= 8.11= 8.11.1= 8.11.2= 8.11.3= 8.11.4= 8.11.5= 8.3.3= 8.3.4= 8.4.0= 8.5.0= 8.9= 8.9.1= 8.9.2= 8.9.3= 8.9.4= 8.9.5= 8.9.6= 9.0= 9.0.1= 9.0.2= 9.0.3= 9.0.4= 9.0.5`	No fix yet

Description

Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service via crafted DNS responses messages that cause (1) a buffer over-read or (2) infinite recursion, which can trigger a segmentation fault or invalid memory access, as demonstrated by the OUSPG PROTOS DNS test suite.

References

secunia.com/advisories/19750 · Patch
securitytracker.com/id · Patch
kb.cert.org/vuls/id/955777 · US Government Resource
niscc.gov.uk/niscc/docs/br-20060425-00311.html · Vendor Advisory
niscc.gov.uk/niscc/docs/re-20060425-00312.pdf · Vendor Advisory
securityfocus.com/bid/17691 · Patch
vupen.com/english/advisories/2006/1505
vupen.com/english/advisories/2006/1506
exchange.xforce.ibmcloud.com/vulnerabilities/26081

More vulnerabilities in delegate

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

delegate

= 7.7.0= 7.7.1= 7.8.0= 7.8.1= 7.8.2= 7.9.11= 8.10= 8.10.1= 8.10.2= 8.10.3= 8.10.4= 8.10.5= 8.10.6= 8.11= 8.11.1= 8.11.2= 8.11.3= 8.11.4= 8.11.5= 8.3.3= 8.3.4= 8.4.0= 8.5.0= 8.9= 8.9.1= 8.9.2= 8.9.3= 8.9.4= 8.9.5= 8.9.6= 9.0= 9.0.1= 9.0.2= 9.0.3= 9.0.4= 9.0.5

No fix yet

Description

More vulnerabilities in delegate

See all →