CVE-2006-2399

CVE-2006-2399 describes a stack-based buffer overflow in Outgun 1.0.3 bot 2 and earlier, specifically within the ServerNetworking::incoming_client_data function. This vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code by sending a data_file_request command with an excessively long type or name string. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While not listed in CISA's KEV catalog, an ExploitDB entry exists (EDB-1781), indicating public exploit code availability, though there is no evidence of active exploitation or significant community discussion.