CVE-2006-6183

EPSS 69.4%

Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long mode field (aka transporting mode) in a (1) GET or (2) PUT command.

Affected products

n/a · n/a

public PoCs found — 5

exploitdbwww.exploit-db.com/exploits/2855unverified exploitdbwww.exploit-db.com/exploits/16347unverified exploitdbwww.exploit-db.com/exploits/2865unverified exploitdbwww.exploit-db.com/exploits/3388unverified exploitdbwww.exploit-db.com/exploits/3170unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/23113 http://securityreason.com/securityalert/1930 https://exchange.xforce.ibmcloud.com/vulnerabilities/30545 http://www.securityfocus.com/archive/1/452754/100/0/threaded http://www.securityfocus.com/bid/21301 http://www.securityfocus.com/bid/21322 http://www.vupen.com/english/advisories/2006/4738