CVE-2006-4310

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Novell Identity Manager - Arbitrary Command Execution2006-08-18 · local · novell · Verified

Impact

Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/23197
• http://secunia.com/advisories/23202
• http://secunia.com/advisories/23235
• http://securityreason.com/securityalert/1444
• http://www.debian.org/security/2006/dsa-1224
• http://www.debian.org/security/2006/dsa-1225
• http://www.debian.org/security/2006/dsa-1227
• http://www.securityfocus.com/archive/1/444064/100/0/threaded
• http://www.securityfocus.com/bid/19678
• http://secunia.com/advisories/23197
• http://secunia.com/advisories/23202
• http://secunia.com/advisories/23235
• http://securityreason.com/securityalert/1444
• http://www.debian.org/security/2006/dsa-1224
• http://www.debian.org/security/2006/dsa-1225
• http://www.debian.org/security/2006/dsa-1227
• http://www.securityfocus.com/archive/1/444064/100/0/threaded
• http://www.securityfocus.com/bid/19678