CVE-2006-0855: Rahul Dhesi Zoo

Medium severity, CVSS 5.1. EPSS: 4.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.

Affected products

• Rahul Dhesi Zoo: up to and including 2.10

Published 2006-02-23. Last modified 2026-06-16.