Unrated severityNVD Advisory· Published Aug 14, 2006· Updated Jun 16, 2026

CVE-2006-4127

Description

Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dconnect/Daemon4 versions
cpe:2.3:a:dconnect:dconnect_daemon:0.0.2:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:dconnect:dconnect_daemon:0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:dconnect:dconnect_daemon:0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:dconnect:dconnect_daemon:0.7.0:*:*:*:*:*:*:*
- (no CPE)range: <=0.7.0

Patches

Vulnerability mechanics

References

www.dc.ds.pg.gda.plnvdPatch
securitytracker.com/idnvdExploit
www.securityfocus.com/bid/19371nvdExploitPatch
secunia.com/advisories/21384nvdVendor Advisory
securityreason.com/securityalert/1377nvd
www.dc.ds.pg.gda.plnvd
www.securityfocus.com/archive/1/442440/100/0/threadednvd
www.vupen.com/english/advisories/2006/3181nvd
exchange.xforce.ibmcloud.com/vulnerabilities/28280nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000