← Vulnerability feed

Vulnerability record · CVE-2006-3124 · published 26 August 2006

CVE-2006-3124: Streamripper vulnerability

Streamripper · Streamripper

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.

7.5 CVSS 2.0 High EPSS 20% · top 2.6%
7.5CVSS 2.0 base score
20%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
26References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.c
http://secunia.com/advisories/21579 PatchVendor Advisory
http://secunia.com/advisories/21658
http://secunia.com/advisories/21749
http://secunia.com/advisories/21801
http://security.gentoo.org/glsa/glsa-200609-01.xml
http://sourceforge.net/project/shownotes.php?release_id=442126 Patch
http://www.debian.org/security/2006/dsa-1158
http://www.novell.com/linux/security/advisories/2006_21_sr.html
http://www.osvdb.org/28178
http://www.securityfocus.com/bid/19707 Patch
http://www.vupen.com/english/advisories/2006/3387
https://exchange.xforce.ibmcloud.com/vulnerabilities/28567
http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.c
http://secunia.com/advisories/21579 PatchVendor Advisory
http://secunia.com/advisories/21658
http://secunia.com/advisories/21749
http://secunia.com/advisories/21801
http://security.gentoo.org/glsa/glsa-200609-01.xml
http://sourceforge.net/project/shownotes.php?release_id=442126 Patch
http://www.debian.org/security/2006/dsa-1158
http://www.novell.com/linux/security/advisories/2006_21_sr.html
http://www.osvdb.org/28178
http://www.securityfocus.com/bid/19707 Patch
http://www.vupen.com/english/advisories/2006/3387
https://exchange.xforce.ibmcloud.com/vulnerabilities/28567

Track CVE-2006-3124 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2008-4829Streamripper memory buffer overflow vulnerabilityMultiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long "Zwitterion v" HTTP he…EPSS 6.5%5.8CVE-2007-4337Streamripper memory buffer overflow vulnerabilityMultiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbit…EPSS 3.5%

Source: NIST National Vulnerability Database (record CVE-2006-3124), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.