CVE-2006-6170
Fixed in a distro release EPSS 17%
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
Products: proftpd_project proftpd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | proftpd-dfsg | 1.3.0-16 |
| Debian 13 | proftpd-dfsg | 1.3.0-16 |
| Debian 14 | proftpd-dfsg | 1.3.0-16 |
| Debian 3.1 | proftpd | 1.2.10-15sarge3 |