CVE-2006-5815
NoneCVSS
—
EPSS
74.2%
Published
Nov 8, 2006
CISA due date
—
The record
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | proftpd-dfsg | 0 | 1.3.0-15 |
| Debian:11 | proftpd-dfsg | 0 | 1.3.0-15 |
| Debian:12 | proftpd-dfsg | 0 | 1.3.0-15 |
| Debian:13 | proftpd-dfsg | 0 | 1.3.0-15 |
| Debian:3.1 | proftpd | 0 | 1.2.10-15sarge3 |
| openSUSE:Tumbleweed | proftpd | 0 | 1.3.6e-1.10 |
Related vulnerabilities
- CVE-2011-4130 Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote… Also affects proftpd-dfsg
- CVE-2009-0543 ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL… Also affects proftpd-dfsg
- CVE-2009-0542 SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote… Also affects proftpd-dfsg
- CVE-2007-2165 The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication… Also affects proftpd-dfsg
- CVE-2006-6170 Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in… Also affects proftpd-dfsg
- CVE-2005-4816 Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause… Also affects proftpd-dfsg
- CVE-2015-3306 The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to… Also affects proftpd-dfsg
- CVE-2011-1137 Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows… Also affects proftpd-dfsg