National Vulnerability Database (CVE-2006-5815)

National Cyber-Alert System Vulnerability Summary: CVE-2006-5815
Orirignal release date: 2006-11-08 Source: US-CERT/NIST ### Overview Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers to cause a denial of service, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit." ### Impact CVSS Severity: 2.3 (Low) Range: remote Authentication: input buffer="1" Impact Type: avail ### Reference to Advisories, Solutions, and Tools External Source: NSO Name: http://gleg.net/vulndisco_meta.shtml Hyperlink: http://gleg.net/vulndisco_meta.shtml External Source: SECTRACK Name: 1017167 Hyperlink: http://securitytracker.com/id?1017167 External Source: BID Name: 20992 Hyperlink: http://www.securityfocus.com/bid/20992 External Source: FRSIRT Name: ADV-2006-4451 Hyperlink: http://www.frsirt.com/english/advisories/2006/4451 External Source: SECUNIA Name: 22803 Hyperlink: http://secunia.com/advisories/22803 External Source: XF Name: proftpd-code-execution(30147) Hyperlink: http://xforce.iss.net/xforce/xfdb/30147 External Source: DEBIAN Name: DSA-1218 Hyperlink: http://www.debian.org/security/2006/dsa-1218 External Source: OPENPKG Name: OpenPKG-SA-2006.035 Hyperlink: http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.035-proftpd.html External Source: MANDRIVA Name: MDKSA-2006:217 Hyperlink: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:217 External Source: SECUNIA Name: 22821 Hyperlink: http://secunia.com/advisories/22821 External Source: SECUNIA Name: 23000 Hyperlink: http://secunia.com/advisories/23000 External Source: SECUNIA Name: 23069 Hyperlink: http://secunia.com/advisories/23069 External Source: NSO Name: http://bugs.proftpd.org/show_bug.cgi?id=2858 Hyperlink: http://bugs.proftpd.org/show_bug.cgi?id=2858 External Source: NSO Name: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820 Hyperlink: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820 External Source: TRUSTIX Name: 2006-0066 Hyperlink: http://www.trustix.org/errata/2006/0066/ External Source: SECUNIA Name: 23125 Hyperlink: http://secunia.com/advisories/23125 External Source: DEBIAN Name: DSA-1222 Hyperlink: http://www.debian.org/security/2006/dsa-1222 External Source: GENTOO Name: GLSA-200611-26 Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml External Source: MANDRIVA Name: MDKSA-2006:217-1 Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1 External Source: SLACKWARE Name: y=2006& Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security& External Source: SECUNIA Name: 23174 Hyperlink: http://secunia.com/advisories/23174 External Source: SECUNIA Name: 23179 Hyperlink: http://secunia.com/advisories/23179 External Source: SECUNIA Name: 23184 Hyperlink: http://secunia.com/advisories/23184 External Source: SECUNIA Name: 23207 Hyperlink: http://secunia.com/advisories/23207 External Source: BUGTRAQ Name: 20061127 CVE-2006-5815: remote code execution in ProFTPD Hyperlink: http://www.securityfocus.com/archive/1/archive/1/452760/100/200/threaded External Source: TRUSTIX Name: 2006-0070 Hyperlink: http://www.trustix.org/errata/2006/0070 ### Vulnerable Software and Vendor ProFTPD (ProFTPD Project) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5815