CVE-2006-0054

The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer.

• CWE-824
• CWE-824

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:04.ipfw.ascBroken Link
• http://secunia.com/advisories/18378Broken Link, Patch, Vendor Advisory
• http://securitytracker.com/id?1015477Broken Link, Third Party Advisory, VDB Entry
• http://www.osvdb.org/22319Broken Link
• http://www.securityfocus.com/bid/16209Broken Link, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24073Third Party Advisory, VDB Entry
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:04.ipfw.ascBroken Link
• http://secunia.com/advisories/18378Broken Link, Patch, Vendor Advisory
• http://securitytracker.com/id?1015477Broken Link, Third Party Advisory, VDB Entry
• http://www.osvdb.org/22319Broken Link
• http://www.securityfocus.com/bid/16209Broken Link, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24073Third Party Advisory, VDB Entry

Published

Jan 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0048Francesco Stablum tcpick 0.2.1 allows remote attackers to ca…
• CVE-2006-0049gpg in GnuPG before 1.4.2.2 does not properly verify non-det…
• CVE-2006-0050snmptrapfmt in Debian 3.0 allows local users to overwrite ar…
• CVE-2006-0051Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4…
• CVE-2006-0052The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and e…
• CVE-2006-0053Imager (libimager-perl) before 0.50 allows user-assisted att…
• CVE-2006-0055The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses pre…
• CVE-2006-0056Double free vulnerability in the authentication and authenti…
• CVE-2006-0057Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote a…
• CVE-2006-0058Signal handler race condition in Sendmail 8.13.x before 8.13…
• CVE-2006-0059Heap-based buffer overflow in the ISO Transport Service over…
• CVE-2006-0061xlockmore 5.13 and 5.22 segfaults when using libpam-opensc a…9.8