PT-2006-7165

CVE-2006-6563

·

Published

2006-12-15

·

Updated

2018-10-17

Description by

CVSS 2.0
6.6
Medium
MetricsAV:L/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.1rc1
Description The issue is a stack-based buffer overflow in the pr ctrls recv request function, located in the ctrls.c file of the mod ctrls module. This allows local users to execute arbitrary code by providing a large reqarglen length value.
Recommendations For versions prior to 1.3.1rc1, update to version 1.3.1rc1 or later to resolve the issue.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾