CVE

Id
22274  
CVE No.
CVE-2006-6170  
Status
Candidate  
Description
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.  
Phase
Assigned (20061130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215241 22274 CVE-2006-6170 BUGTRAQ:20061121 Re: [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities  View
215242 22274 CVE-2006-6170 URL:http://www.securityfocus.com/archive/1/archive/1/452228/100/100/threaded  View
215243 22274 CVE-2006-6170 BUGTRAQ:20061128 ProFTPD mod_tls pre-authentication buffer overflow  View
215244 22274 CVE-2006-6170 URL:http://www.securityfocus.com/archive/1/archive/1/452872/100/0/threaded  View
215245 22274 CVE-2006-6170 BUGTRAQ:20061129 Re: ProFTPD mod_tls pre-authentication buffer overflow  View
215246 22274 CVE-2006-6170 URL:http://www.securityfocus.com/archive/1/archive/1/452993/100/100/threaded  View
215247 22274 CVE-2006-6170 FULLDISC:20061128 ProFTPD mod_tls pre-authentication buffer overflow  View
215248 22274 CVE-2006-6170 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050935.html  View
215249 22274 CVE-2006-6170 MISC:http://elegerov.blogspot.com/2006/10/do-you-remember-2-years-old-overflow.html  View
215250 22274 CVE-2006-6170 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820  View
215251 22274 CVE-2006-6170 DEBIAN:DSA-1222  View
215252 22274 CVE-2006-6170 URL:http://www.debian.org/security/2006/dsa-1222  View
215253 22274 CVE-2006-6170 GENTOO:GLSA-200611-26  View
215254 22274 CVE-2006-6170 URL:http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml  View
215255 22274 CVE-2006-6170 MANDRIVA:MDKSA-2006:217-1  View
215256 22274 CVE-2006-6170 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1  View
215257 22274 CVE-2006-6170 SLACKWARE:SSA:2006-335-02  View
215258 22274 CVE-2006-6170 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491  View
215259 22274 CVE-2006-6170 TRUSTIX:2006-0066  View
215260 22274 CVE-2006-6170 URL:http://www.trustix.org/errata/2006/0066  View
215261 22274 CVE-2006-6170 BID:21326  View
215262 22274 CVE-2006-6170 URL:http://www.securityfocus.com/bid/21326  View
215263 22274 CVE-2006-6170 VUPEN:ADV-2006-4745  View
215264 22274 CVE-2006-6170 URL:http://www.vupen.com/english/advisories/2006/4745  View
215265 22274 CVE-2006-6170 SECUNIA:23141  View
215266 22274 CVE-2006-6170 URL:http://secunia.com/advisories/23141  View
215267 22274 CVE-2006-6170 SECUNIA:23174  View
215268 22274 CVE-2006-6170 URL:http://secunia.com/advisories/23174  View
215269 22274 CVE-2006-6170 SECUNIA:23179  View
215270 22274 CVE-2006-6170 URL:http://secunia.com/advisories/23179  View
215271 22274 CVE-2006-6170 SECUNIA:23184  View
215272 22274 CVE-2006-6170 URL:http://secunia.com/advisories/23184  View
215273 22274 CVE-2006-6170 SECUNIA:23207  View
215274 22274 CVE-2006-6170 URL:http://secunia.com/advisories/23207  View
215275 22274 CVE-2006-6170 XF:proftpd-modtls-bo(30554)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60203 JVNDB-2006-002469 xine/xine-lib などの Real Media 入力プラグインにおけるバッファオーバーフローの脆弱性 (1) xine/xine-lib、(2) MPlayer で使用される Real Media 入力プラグインの RealMedia RTSP ストリームハンドラ (asmrp.c) の asmrp_eval 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-6172 22274 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002469.html  View