critical10.0Public exploit code
CVE-2006-6183
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arb…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 3Com TFTP Service (3CTftpSvc) - 'Mode' Remote Buffer Overflow (Metasploit)2010-05-09 · remote · windows · Verified
- 3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode2007-02-28 · remote · windows · Verified
- 3Com TFTP Service (3CTftpSvc) 2.0.1 - Remote Buffer Overflow (Metasploit)2007-01-21 · remote · windows · Verified
- 3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Remote Overflow2006-11-30 · remote · windows · Verified
- 3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Overflow (PoC)2006-11-27 · dos · windows · Verified
Impact
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long mode field (aka transporting mode) in a (1) GET or (2) PUT command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3com | 3ctftpsvc | through 2.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23113
- http://securityreason.com/securityalert/1930
- http://www.securityfocus.com/archive/1/452754/100/0/threaded
- http://www.securityfocus.com/bid/21301
- http://www.securityfocus.com/bid/21322
- http://www.vupen.com/english/advisories/2006/4738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30545
- http://secunia.com/advisories/23113
- http://securityreason.com/securityalert/1930
- http://www.securityfocus.com/archive/1/452754/100/0/threaded
- http://www.securityfocus.com/bid/21301
- http://www.securityfocus.com/bid/21322
- http://www.vupen.com/english/advisories/2006/4738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30545