Unrated severityNVD Advisory· Published Feb 13, 2006· Updated Jun 16, 2026
CVE-2006-0056
CVE-2006-0056
Description
Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer that was created by the pam_get_item function. NOTE: this issue only occurs in certain configurations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules before PAM-MySQL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:pam-mysql:pam-mysql:0.1:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:pam-mysql:pam-mysql:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:pam-mysql:pam-mysql:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:pam-mysql:pam-mysql:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:pam-mysql:pam-mysql:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:pam-mysql:pam-mysql:0.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:pam-mysql:pam-mysql:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:pam-mysql:pam-mysql:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:pam-mysql:pam-mysql:0.7_pre1:*:*:*:*:*:*:*
- cpe:2.3:a:pam-mysql:pam-mysql:0.7_pre2:*:*:*:*:*:*:*
- (no CPE)range: <0.6.2 || <0.7pre3
Patches
Vulnerability mechanics
References
11- secunia.com/advisories/18598nvdPatchVendor Advisory
- securitytracker.com/idnvdPatch
- www.kb.cert.org/vuls/id/693909nvdPatchThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/16564nvdPatch
- secunia.com/advisories/20690nvdVendor Advisory
- jvn.jp/cert/JVNVU%23693909/index.htmlnvd
- sourceforge.net/forum/forum.phpnvd
- www.gentoo.org/security/en/glsa/glsa-200606-18.xmlnvd
- www.osvdb.org/22994nvd
- www.osvdb.org/22995nvd
- www.vupen.com/english/advisories/2006/0490nvd
News mentions
0No linked articles in our index yet.