CVE

Id
22756  
CVE No.
CVE-2006-6652  
Status
Candidate  
Description
Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long pathname that results from path expansion.  
Phase
Assigned (20061219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
220169 22756 CVE-2006-6652 FULLDISC:20061201 NetBSD FTPD and ports ***REMOTE ROOOOOT HOLE***  View
220170 22756 CVE-2006-6652 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051009.html  View
220171 22756 CVE-2006-6652 CONFIRM:http://docs.info.apple.com/article.html?artnum=305391  View
220172 22756 CVE-2006-6652 APPLE:APPLE-SA-2007-04-19  View
220173 22756 CVE-2006-6652 URL:http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html  View
220174 22756 CVE-2006-6652 NETBSD:NetBSD-SA2006-027  View
220175 22756 CVE-2006-6652 URL:http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-027.txt.asc  View
220176 22756 CVE-2006-6652 CERT:TA07-109A  View
220177 22756 CVE-2006-6652 URL:http://www.us-cert.gov/cas/techalerts/TA07-109A.html  View
220178 22756 CVE-2006-6652 BID:21377  View
220179 22756 CVE-2006-6652 URL:http://www.securityfocus.com/bid/21377  View
220180 22756 CVE-2006-6652 VUPEN:ADV-2007-1470  View
220181 22756 CVE-2006-6652 URL:http://www.vupen.com/english/advisories/2007/1470  View
220182 22756 CVE-2006-6652 OSVDB:31781  View
220183 22756 CVE-2006-6652 URL:http://www.osvdb.org/31781  View
220184 22756 CVE-2006-6652 SECTRACK:1017386  View
220185 22756 CVE-2006-6652 URL:http://securitytracker.com/id?1017386  View
220186 22756 CVE-2006-6652 SECUNIA:24966  View
220187 22756 CVE-2006-6652 URL:http://secunia.com/advisories/24966  View
220188 22756 CVE-2006-6652 SECUNIA:23178  View
220189 22756 CVE-2006-6652 URL:http://secunia.com/advisories/23178  View
220190 22756 CVE-2006-6652 XF:netbsd-ftpd-glob-bo(30670)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60340 JVNDB-2006-002606 NetBSD の sendmsg 関数におけるサービス運用妨害 (DoS) の脆弱性 NetBSD の sendmsg 関数には、64 ビットアーキテクチャ上で稼動している際、サービス運用妨害 (カーネルパニック) 状態となる脆弱性が存在します。 CVE-2006-6654 22756 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002606.html  View