CVE-2006-5601

CRITICAL 9.0CVE-2006-5601 · Published 28/10/2006 · updated 16/06/2026

In short

CVE-2006-5601 is a CRITICAL (CVSS 9.0) vulnerability affecting xsupplicant (xsupplicant).
Chance of exploitation in the next 30 days (EPSS): 4.2%, higher than 91.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xsupplicant xsupplicant	`= 0.5= 0.6= 0.7= 0.8= 0.8b= 1.0= 1.0.1= 1.0pre1= 1.0pre2= 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2pre1≤ 1.2.5`	No fix yet

Description

Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote authenticated users to execute arbitrary code via unspecified vectors.

References

open1x.cvs.sourceforge.net/open1x/xsupplicant/src/eap.c
secunia.com/advisories/22612 · Vendor Advisory
secunia.com/advisories/22641 · Vendor Advisory
mandriva.com/security/advisories
novell.com/linux/security/advisories/2007_01_sr.html
securityfocus.com/bid/20775 · Patch
vupen.com/english/advisories/2006/4233 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/29902

More vulnerabilities in xsupplicant

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free