CVE-2006-6170
- State
- Published
- Severity
- Not scored
- Published
- Nov 30, 2006
- Updated
- Aug 7, 2024
- Reserved
- Nov 30, 2006
Description
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-1222vendor-advisory
- 20061128 ProFTPD mod_tls pre-authentication buffer overflowmailing-list
- 20061129 Re: ProFTPD mod_tls pre-authentication buffer overflowmailing-list
- 23207third-party-advisory
- SSA:2006-335-02vendor-advisory
- 23141third-party-advisory
- 23174third-party-advisory
- MDKSA-2006:217-1vendor-advisory
- 21326vdb-entry
- 20061128 ProFTPD mod_tls pre-authentication buffer overflowmailing-list
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820
- 23184third-party-advisory
- http://elegerov.blogspot.com/2006/10/do-you-remember-2-years-old-overflow.html
- 2006-0066vendor-advisory
- 23179third-party-advisory
- GLSA-200611-26vendor-advisory
- 20061121 Re: [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilitiesmailing-list
- proftpd-modtls-bo(30554)vdb-entry
- ADV-2006-4745vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.