medium6.6Public exploit code
CVE-2006-6563
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (2)2007-02-19 · local · linux · Verified
- ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (1)2007-02-18 · local · linux · Verified
- ProFTPd 1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (PoC)2006-12-13 · dos · linux · Verified
- ProFTPd - 'ftpdctl' 'pr_ctrls_connect' Local Overflow2004-08-13 · local · linux · Verified
Impact
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Proftpd Project | Proftpd | Versions 1.3.0, 1.3.0a |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23371
- http://secunia.com/advisories/23392
- http://secunia.com/advisories/23473
- http://secunia.com/advisories/24163
- http://security.gentoo.org/glsa/glsa-200702-02.xml
- http://www.coresecurity.com/?module=ContentMod&action=item&id=1594
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:232
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.039.html
- http://www.proftpd.org/docs/NEWS-1.3.1rc1
- http://www.securityfocus.com/archive/1/454320/100/0/threaded
- http://www.securityfocus.com/archive/1/460648/100/0/threaded
- http://www.securityfocus.com/archive/1/460756/100/0/threaded
- http://www.securityfocus.com/bid/21587
- http://www.trustix.org/errata/2006/0074/
- http://www.vupen.com/english/advisories/2006/4998
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30906
- https://www.exploit-db.com/exploits/3330
- http://secunia.com/advisories/23371
- http://secunia.com/advisories/23392
- http://secunia.com/advisories/23473
- http://secunia.com/advisories/24163
- http://security.gentoo.org/glsa/glsa-200702-02.xml
- http://www.coresecurity.com/?module=ContentMod&action=item&id=1594
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:232
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.039.html