CVE-2006-1592

Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument.

• http://aluigi.altervista.org/adv/zdaebof-adv.txtExploit, Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html
• http://secunia.com/advisories/19496
• http://secunia.com/advisories/19509Vendor Advisory
• http://www.securityfocus.com/archive/1/429521/100/0/threaded
• http://www.securityfocus.com/bid/17340
• http://www.vupen.com/english/advisories/2006/1198
• http://www.vupen.com/english/advisories/2006/1199
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25592
• http://aluigi.altervista.org/adv/zdaebof-adv.txtExploit, Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html
• http://secunia.com/advisories/19496
• http://secunia.com/advisories/19509Vendor Advisory
• http://www.securityfocus.com/archive/1/429521/100/0/threaded
• http://www.securityfocus.com/bid/17340
• http://www.vupen.com/english/advisories/2006/1198
• http://www.vupen.com/english/advisories/2006/1199
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25592

Published

Apr 3, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1586SQL injection vulnerability in admin_login.asp in ISP of Egy…
• CVE-2006-1587NetBSD 1.6 up to 3.0, when a user has "set record" in .mailr…
• CVE-2006-1588The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 …
• CVE-2006-1589The elf_load_file function in NetBSD 2.0 through 3.0 allows …
• CVE-2006-1590Cross-site scripting (XSS) vulnerability in the PrintFreshPa…
• CVE-2006-1591Heap-based buffer overflow in Microsoft Windows Help winhlp3…
• CVE-2006-1593The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNew…
• CVE-2006-1594Multiple directory traversal vulnerabilities in document/rqm…
• CVE-2006-1595Cross-site scripting (XSS) vulnerability in document/rqmkhtm…
• CVE-2006-1596PHP remote file inclusion vulnerability in learnPath/include…
• CVE-2006-1598AN HTTPD 1.42n, and possibly other versions before 1.42p, al…
• CVE-2006-1599Unspecified vulnerability in VCEngine.php in v-creator befor…