Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2006-6170

Published: 30/11/2006 Updated: 17/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Proftpd

Vulnerability Summary

Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and previous versions, and possibly other products, allows remote malicious users to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.

Vulnerable Product Search on Vulmon Subscribe to Product

proftpd project proftpd

Vendor Advisories

Debian Security Advisories: DSA-1222-2 proftpd -- several vulnerabilities
Due to technical problems yesterday's proftpd update lacked a build for the amd64 architecture, which is now available For reference please find below the original advisory text: Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of arbitrary code or denial of service The Common Vulnera ...

References

NVD-CWE-Otherhttp://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050935.htmlhttp://elegerov.blogspot.com/2006/10/do-you-remember-2-years-old-overflow.htmlhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820http://secunia.com/advisories/23141http://www.debian.org/security/2006/dsa-1222http://www.gentoo.org/security/en/glsa/glsa-200611-26.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491http://www.securityfocus.com/bid/21326http://secunia.com/advisories/23174http://secunia.com/advisories/23179http://secunia.com/advisories/23184http://secunia.com/advisories/23207http://www.trustix.org/errata/2006/0066http://www.vupen.com/english/advisories/2006/4745https://exchange.xforce.ibmcloud.com/vulnerabilities/30554http://www.securityfocus.com/archive/1/452993/100/100/threadedhttp://www.securityfocus.com/archive/1/452872/100/0/threadedhttp://www.securityfocus.com/archive/1/452228/100/100/threadedhttps://nvd.nist.govhttps://www.debian.org/security/./dsa-1222
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744privilege escalationCVE-2024-30253CVE-2024-3914cross-site scriptingCVE-2024-31497CVE-2024-3400CVE-2024-32341hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook