NetSight
IP …
critical9.0Public exploit code

CVE-2006-6652

Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 20…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long pathname that results from path expansion.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1
NetbsdNetbsd
Versions 2.0, 2.1, 3.0, 3.1

Weakness classification

CWE-119

References