CVE-2006-6652

CVE-2006-6652 describes a buffer overflow in the glob implementation (glob.c) of libc used by the FTP daemon tnftpd, affecting NetBSD-current (before 20050914), NetBSD 2.* and 3.* before 20061203, and Mac OS X before 2007-004. A long pathname resulting from path expansion can allow remote authent...