CVE-2006-5815: Buffer Overflow
Published Nov 8, 2006
·Updated
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vdproftpd.pm, a "ProFTPD remote exploit."
Affected Software
1 affected component
Proftpd Project Proftpd<=1.3.0
Event History
Nov 8, 2006
CVE Published
11:07 PM
Data Sourced
via NVD·11:07 PM
DescriptionSeverityWeaknessAffected Software
Nov 9, 2006
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5815?
CVE-2006-5815 has a high severity rating due to the potential for remote code execution and denial of service.
2
How do I fix CVE-2006-5815?
To fix CVE-2006-5815, upgrade ProFTPD to version 1.3.1 or later where the vulnerability is patched.
3
Who is affected by CVE-2006-5815?
CVE-2006-5815 affects users of ProFTPD version 1.3.0 and earlier.
4
What type of attack does CVE-2006-5815 enable?
CVE-2006-5815 enables remote attackers to exploit a buffer overflow for arbitrary code execution.
5
Can CVE-2006-5815 be exploited without authentication?
Exploitation of CVE-2006-5815 is likely to require authentication by the attacker.