CVE-2006-3792

HIGH 7.5CVE-2006-3792 · Published 24/07/2006 · updated 16/06/2026

In short

CVE-2006-3792 is a HIGH (CVSS 7.5) vulnerability affecting ufo2000 (ufo2000).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ufo2000 ufo2000	`≤ svn_1057`	No fix yet

Description

SQL injection vulnerability in ServerClientUfo::recv_packet in server_protocol.cpp in UFO2000 svn 1057 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving the packet.c_str function.

References

aluigi.altervista.org/adv/ufo2ko-adv.txt
secunia.com/advisories/21091 · Vendor Advisory
secunia.com/advisories/24297
securityreason.com/securityalert/1259
securitytracker.com/id · Vendor Advisory
svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_protocol.cpp
gentoo.org/security/en/glsa/glsa-200702-10.xml
securityfocus.com/archive/1/440293/100/0/threaded
securityfocus.com/bid/19028
vupen.com/english/advisories/2006/2837
exchange.xforce.ibmcloud.com/vulnerabilities/27816

More vulnerabilities in ufo2000

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free