CVE-2006-6170

5 documents5 sources
Severity
7.5HIGH
EPSS
14.4%
top 5.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Proftpd Project Proftpd
Timeline
PublishedNov 30
Latest updateMay 1

Description

Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶Debianproftpd-dfsg< 1.3.0-16+3

🔴Vulnerability Details

3
GHSA
GHSA-9qxv-mv47-gw7g: Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1↗2022-05-01
▶
OSV
CVE-2006-6170: Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1↗2006-11-30
▶
CVEList
CVE-2006-6170: Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1↗2006-11-30
▶

📋Vendor Advisories

1
Debian
CVE-2006-6170: proftpd-dfsg - Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as ...↗2006
▶