CVE-2006-6170
NoneCVSS
—
EPSS
17.1%
Published
Nov 30, 2006
CISA due date
—
The record
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | proftpd-dfsg | 0 | 1.3.0-16 |
| Debian:11 | proftpd-dfsg | 0 | 1.3.0-16 |
| Debian:12 | proftpd-dfsg | 0 | 1.3.0-16 |
| Debian:13 | proftpd-dfsg | 0 | 1.3.0-16 |
| Debian:3.1 | proftpd | 0 | 1.2.10-15sarge3 |
Related vulnerabilities
- CVE-2011-4130 Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote… Also affects proftpd-dfsg
- CVE-2009-0543 ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL… Also affects proftpd-dfsg
- CVE-2009-0542 SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote… Also affects proftpd-dfsg
- CVE-2007-2165 The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication… Also affects proftpd-dfsg
- CVE-2006-5815 Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows… Also affects proftpd-dfsg
- CVE-2005-4816 Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause… Also affects proftpd-dfsg
- CVE-2015-3306 The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to… Also affects proftpd-dfsg
- CVE-2011-1137 Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows… Also affects proftpd-dfsg