CVE-2006-6652

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 20061203 NetBSD-current before 20050914 Apple Mac OS X before 2007-004

Description The issue is related to a buffer overflow in the glob implementation, which can be exploited by remote authenticated users to execute arbitrary code. This is achieved by providing a long pathname that results from path expansion, affecting the FTP daemon and tnftpd.

Recommendations For NetBSD versions prior to 20061203, update to a version after 20061203 to resolve the issue. For NetBSD-current before 20050914, update to a version after 20050914 to resolve the issue. For Apple Mac OS X before 2007-004, update to a version after 2007-004 to resolve the issue.