CVE-2006-6563

2006-12-1500:00:00

ubuntu.com

6.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

65.1%

JSON

Stack-based buffer overflow in the pr_ctrls_recv_request function in
ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local
users to execute arbitrary code via a large reqarglen length value.

OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchproftpd-dfsg< 1.3.0-17UNKNOWN
ubuntu7.10noarchproftpd-dfsg< 1.3.0-17UNKNOWN
ubuntu8.04noarchproftpd-dfsg< 1.3.0-17UNKNOWN
ubuntu8.10noarchproftpd-dfsg< 1.3.0-17UNKNOWN
ubuntu9.04noarchproftpd-dfsg< 1.3.0-17UNKNOWN
ubuntu9.10noarchproftpd-dfsg< 1.3.0-17UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.04	noarch	proftpd-dfsg	< 1.3.0-17	UNKNOWN
ubuntu	7.10	noarch	proftpd-dfsg	< 1.3.0-17	UNKNOWN
ubuntu	8.04	noarch	proftpd-dfsg	< 1.3.0-17	UNKNOWN
ubuntu	8.10	noarch	proftpd-dfsg	< 1.3.0-17	UNKNOWN
ubuntu	9.04	noarch	proftpd-dfsg	< 1.3.0-17	UNKNOWN
ubuntu	9.10	noarch	proftpd-dfsg	< 1.3.0-17	UNKNOWN