CVE-2006-5815
🔴 Łataj teraz
Przepełnienie bufora w funkcji sreplace w ProFTPD umożliwia zdalne wykonanie kodu.
CVSS
10.0
EPSS
73.4%
Exploit
none
Vendor
proftpd_project
Opis źródłowy (NVD)
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."
buffer-overflow dos
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 10.0 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 73.4% |
| Opublikowano (NVD) | 2006-11-08 23:07:00 UTC |
| Ostatnia modyfikacja (NVD) | 2026-04-23 00:35:47 UTC |
Referencje
- http://bugs.proftpd.org/show_bug.cgi?id=2858 (cve@mitre.org)
- http://gleg.net/vulndisco_meta.shtml (cve@mitre.org)
- http://secunia.com/advisories/22803 (cve@mitre.org) [Vendor Advisory]
- http://secunia.com/advisories/22821 (cve@mitre.org) [Vendor Advisory]
- http://secunia.com/advisories/23000 (cve@mitre.org) [Vendor Advisory]
- http://secunia.com/advisories/23069 (cve@mitre.org) [Vendor Advisory]
- http://secunia.com/advisories/23125 (cve@mitre.org) [Vendor Advisory]
- http://secunia.com/advisories/23174 (cve@mitre.org) [Vendor Advisory]
- http://secunia.com/advisories/23179 (cve@mitre.org) [Vendor Advisory]
- http://secunia.com/advisories/23184 (cve@mitre.org) [Vendor Advisory]
- http://secunia.com/advisories/23207 (cve@mitre.org) [Vendor Advisory]
- http://securitytracker.com/id?1017167 (cve@mitre.org)
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491 (cve@mitre.org)
- http://www.debian.org/security/2006/dsa-1222 (cve@mitre.org)
- http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml (cve@mitre.org)
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:217 (cve@mitre.org)
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1 (cve@mitre.org)
- http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.035-proftpd.html (cve@mitre.org)
- http://www.securityfocus.com/archive/1/452760/100/200/threaded (cve@mitre.org)
- http://www.securityfocus.com/bid/20992 (cve@mitre.org)
- http://www.trustix.org/errata/2006/0066/ (cve@mitre.org)
- http://www.trustix.org/errata/2006/0070 (cve@mitre.org)
- http://www.vupen.com/english/advisories/2006/4451 (cve@mitre.org) [Vendor Advisory]
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820 (cve@mitre.org)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30147 (cve@mitre.org)