CVE-2006-6227

The Core::Receive function in neonet/core.cpp for NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service (engine crash) via a message with a large uiMessageLength that produces a failed memory allocation and a null pointer dereference.

• http://aluigi.altervista.org/adv/neoenginex-adv.txtVendor Advisory
• http://www.osvdb.org/27927
• http://www.securiteam.com/securitynews/5MP0N2AIUC.htmlVendor Advisory
• http://www.securityfocus.com/bid/18696Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27529
• http://aluigi.altervista.org/adv/neoenginex-adv.txtVendor Advisory
• http://www.osvdb.org/27927
• http://www.securiteam.com/securitynews/5MP0N2AIUC.htmlVendor Advisory
• http://www.securityfocus.com/bid/18696Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27529

Published

Dec 2, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-62212X ThinClientServer Enterprise Edition before 4.0.2248 allow…
• CVE-2006-6222Stack-based buffer overflow in the NetBackup bpcd daemon (bp…
• CVE-2006-6223Cross-site scripting (XSS) vulnerability in Google Search Ap…
• CVE-2006-6224PHP remote file inclusion vulnerability in the installation …
• CVE-2006-6225Multiple PHP remote file inclusion vulnerabilities in GeekLo…
• CVE-2006-6226Multiple format string vulnerabilities in NeoEngine 0.8.2 an…
• CVE-2006-6228Cross-site scripting (XSS) vulnerability in Codewalkers ltwC…
• CVE-2006-6229Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.…
• CVE-2006-6230SQL injection vulnerability in vuBB 0.2.1 and earlier allows…
• CVE-2006-6231vuBB 0.2.1 and earlier allows remote attackers to obtain sen…
• CVE-2006-6232PHP remote file inclusion vulnerability in admin/index.php i…
• CVE-2006-6233SQL injection vulnerability in the Downloads module for unkn…