CVE-2006-6563

EPSS 2.3%

Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/2928unverified exploitdbwww.exploit-db.com/exploits/394unverified cve_referencewww.exploit-db.com/exploits/3330unverified exploitdbwww.exploit-db.com/exploits/3333unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/23371 http://secunia.com/advisories/23392 http://secunia.com/advisories/23473 http://secunia.com/advisories/24163 http://security.gentoo.org/glsa/glsa-200702-02.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/30906 https://www.exploit-db.com/exploits/3330 http://www.coresecurity.com/?module=ContentMod&action=item&id=1594 http://www.mandriva.com/security/advisories?name=MDKSA-2006:232 http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.039.html http://www.proftpd.org/docs/NEWS-1.3.1rc1 http://www.securityfocus.com/archive/1/454320/100/0/threaded