CVE-2006-5815
Fixed in a distro release EPSS 75%
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."
Products: proftpd_project proftpd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | proftpd-dfsg | 1.3.0-15 |
| Debian 13 | proftpd-dfsg | 1.3.0-15 |
| Debian 14 | proftpd-dfsg | 1.3.0-15 |
| Debian 3.1 | proftpd | 1.2.10-15sarge3 |
| openSUSE Tumbleweed | proftpd | 1.3.6e-1.10 |