CVE-2006-1593

The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index.

• CWE-399

• http://aluigi.altervista.org/adv/zdaebof-adv.txt
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html
• http://secunia.com/advisories/19496Vendor Advisory
• http://secunia.com/advisories/19509Vendor Advisory
• http://securityreason.com/securityalert/662
• http://www.securityfocus.com/archive/1/429521/100/0/threaded
• http://www.securityfocus.com/bid/17340
• http://www.vupen.com/english/advisories/2006/1198Vendor Advisory
• http://www.vupen.com/english/advisories/2006/1199Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25593
• http://aluigi.altervista.org/adv/zdaebof-adv.txt
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html
• http://secunia.com/advisories/19496Vendor Advisory
• http://secunia.com/advisories/19509Vendor Advisory
• http://securityreason.com/securityalert/662
• http://www.securityfocus.com/archive/1/429521/100/0/threaded
• http://www.securityfocus.com/bid/17340
• http://www.vupen.com/english/advisories/2006/1198Vendor Advisory
• http://www.vupen.com/english/advisories/2006/1199Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25593

Published

Apr 3, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1587NetBSD 1.6 up to 3.0, when a user has "set record" in .mailr…
• CVE-2006-1588The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 …
• CVE-2006-1589The elf_load_file function in NetBSD 2.0 through 3.0 allows …
• CVE-2006-1590Cross-site scripting (XSS) vulnerability in the PrintFreshPa…
• CVE-2006-1591Heap-based buffer overflow in Microsoft Windows Help winhlp3…
• CVE-2006-1592Buffer overflow in the is_client_wad_ok function in w_wad.cp…
• CVE-2006-1594Multiple directory traversal vulnerabilities in document/rqm…
• CVE-2006-1595Cross-site scripting (XSS) vulnerability in document/rqmkhtm…
• CVE-2006-1596PHP remote file inclusion vulnerability in learnPath/include…
• CVE-2006-1598AN HTTPD 1.42n, and possibly other versions before 1.42p, al…
• CVE-2006-1599Unspecified vulnerability in VCEngine.php in v-creator befor…
• CVE-2006-1600SQL injection vulnerability in category.php in PhpWebGallery…