CVE-2006-6853

CRITICAL ⚠ Exploit

Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002.

Affects 1 product across 1 vendor.

CVSS 2.010.0
EPSS8.1%
Percentile95th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
◆ AI Analysis — automated analysis, not human-reviewed

A critical buffer overflow vulnerability in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code through a crafted packet sent to TCP port 4002.

BSID: BS-2006-GLOBAL-016388-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2006-6853?
A critical buffer overflow vulnerability in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code through a crafted packet sent to TCP port 4002.
What is the CVSS score for CVE-2006-6853?
CVE-2006-6853 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 8.1%.
Is CVE-2006-6853 actively exploited?
Public exploit available for CVE-2006-6853. Exploitation risk elevated.
How do I remediate CVE-2006-6853?
Priority: IMMEDIATE.
What systems are affected by CVE-2006-6853?
CVE-2006-6853 affects Mozilla Durian Web Application Server.
Vulnerability Details
CVE IDCVE-2006-6853
BSIDBS-2006-GLOBAL-016388-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2006-12-31
Last Modified2026-06-16
ICS Relevance0%
SourceNVD
Official Description

Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is triggered by sending a long string in a crafted packet to TCP port 4002, which causes a buffer overflow and allows the execution of arbitrary code with the privileges of the server.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Mozilla Durian Web Application Server 3.02
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 7229 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Mozilla
CVE-2026-2761 10.0 Sandbox escape in the Graphics: WebRender component. This vulnerability was f... CVE-2003-1043 10.0 SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 throug... CVE-2012-0467 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox... CVE-2009-2465 10.0 Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause... CVE-2008-4070 10.0 Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonk...
View all Mozilla CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →