Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-2587 Details

Description

Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products including (2) America's Army 1.228 and earlier, (3) Battlefield 1942 1.158 and earlier, (4) Battlefield 2 1.184 and earlier, (5) Battlefield Vietnam 1.150 and earlier, (6) Call of Duty 1.173 and earlier, (7) Call of Duty 2 1.108 and earlier, (8) DOOM 3 1.159 and earlier, (9) Enemy Territory 1.167 and earlier, (10) Far Cry 1.150 and earlier, (11) F.E.A.R. 1.093 and earlier, (12) Joint Operations 1.187 and earlier, (13) Quake III Arena 1.150 and earlier, (14) Quake 4 1.181 and earlier, (15) Rainbow Six 3: Raven Shield 1.169 and earlier, (16) Rainbow Six 4: Lockdown 1.093 and earlier, (17) Return to Castle Wolfenstein 1.175 and earlier, and (18) Soldier of Fortune II 1.183 and earlier allows remote attackers to cause a denial of service (application crash) via a long webkey parameter.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://aluigi.altervista.org/adv/pbwebbof-adv.txt	CVE	ExploitVendor Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0607.html	CVE
http://secunia.com/advisories/20257	CVE	PatchVendor Advisory
http://securitytracker.com/id?1016155	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/26608	CVE
http://www.evenbalance.com/index.php?page=support-all.php	CVE
http://www.osvdb.org/25738	CVE
http://www.securityfocus.com/archive/1/434909/100/0/threaded	CVE
http://www.securityfocus.com/bid/18106	CVE
http://www.vupen.com/english/advisories/2006/1940	CVE
http://aluigi.altervista.org/adv/pbwebbof-adv.txt	[email protected]	ExploitVendor Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0607.html	[email protected]
http://secunia.com/advisories/20257	[email protected]	PatchVendor Advisory
http://securitytracker.com/id?1016155	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/26608	[email protected]
http://www.evenbalance.com/index.php?page=support-all.php	[email protected]
http://www.osvdb.org/25738	[email protected]
http://www.securityfocus.com/archive/1/434909/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/18106	[email protected]
http://www.vupen.com/english/advisories/2006/1940	[email protected]

see all 20 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
even balance punkbuster	1.228
CPE cpe:2.3:a:even_balance:punkbuster:1.228::servers::::: Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 18, 2018	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
May 25, 2006	Initial Analysis	[email protected]