CVE-2006-5815

🗓️ 08 Nov 2006 23:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 115 Views🌐 WEB

Stack-based buffer overflow in ProFTPD 1.3.0 and earlier allows remote attackers to cause denial of service and execute arbitrary code

Reporter	Title	Published	Views	Family All 53
ALT Linux	Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt1.3	14 Nov 200600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt2	16 May 200700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt1.2	13 Nov 200600:00	–	altlinux
FreeBSD	proftpd -- remote code execution vulnerabilities	10 Nov 200600:00	–	freebsd
Tenable Nessus	ProFTPD Command Truncation Cross-Site Request Forgery	22 Sep 200800:00	–	nessus
Tenable Nessus	Debian DSA-1222-2 : proftpd - several vulnerabilities	4 Dec 200600:00	–	nessus
Tenable Nessus	FreeBSD : proftpd -- remote code execution vulnerabilities (3f851b22-89fb-11db-a937-003048116330)	30 Dec 200600:00	–	nessus
Tenable Nessus	GLSA-200611-26 : ProFTPD: Remote execution of arbitrary code	4 Dec 200600:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : proftpd (MDKSA-2006:217-1)	18 Feb 200700:00	–	nessus
Tenable Nessus	ProFTPD < 1.3.0a Multiple Vulnerabilities	15 Oct 200700:00	–	nessus

NVD

Node

Source	Link
gentoo	www.gentoo.org/security/en/glsa/glsa-200611-26.xml
secunia	www.secunia.com/advisories/23125
securityfocus	www.securityfocus.com/bid/20992
mandriva	www.mandriva.com/security/advisories
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/30147
debian	www.debian.org/security/2006/dsa-1222
secunia	www.secunia.com/advisories/23069
vupen	www.vupen.com/english/advisories/2006/4451
mandriva	www.mandriva.com/security/advisories
trustix	www.trustix.org/errata/2006/0070

Parameter	Position	Path	Description	CWE
WRITABLE	path	/incoming	ProFTPD sreplace stack-based buffer overflow during CWD into a writable directory after uploading a crafted .message file (exploit workflow uses MKD/CWD/PUT/DELE/RMD).	CWE-119
/incoming/.message	path	/incoming	ProFTPD sreplace stack-based buffer overflow during CWD into a writable directory after uploading a crafted .message file (exploit workflow uses MKD/CWD/PUT/DELE/RMD).	CWE-119
dir1	path	/incoming	ProFTPD sreplace stack-based buffer overflow during CWD into a writable directory after uploading a crafted .message file (exploit workflow uses MKD/CWD/PUT/DELE/RMD).	CWE-119
dir2	path	/incoming	ProFTPD sreplace stack-based buffer overflow during CWD into a writable directory after uploading a crafted .message file (exploit workflow uses MKD/CWD/PUT/DELE/RMD).	CWE-119
dir2	path	/incoming/dir2	Overflow triggered when changing directory to dir2 which contains crafted data used to overflow ProFTPD sreplace function.	CWE-119
payload	path	/incoming/dir2	Overflow triggered when changing directory to dir2 which contains crafted data used to overflow ProFTPD sreplace function.	CWE-119
.message	path	/incoming/dir2	Overflow triggered when changing directory to dir2 which contains crafted data used to overflow ProFTPD sreplace function.	CWE-119

16 Jun 2026 22:31Current

7.2High risk

Vulners AI Score7.2

CVSS 210

EPSS0.73823