NVD

Id
64732  
Name
CVE-2006-6171  
Description
** DISPUTED ** ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which leads to an off-by-two buffer underflow. NOTE: in November 2006, the role of CommandBufferSize was originally associated with CVE-2006-5815, but this was an error stemming from a vague initial disclosure. NOTE: ProFTPD developers dispute this issue, saying that the relevant memory location is overwritten by assignment before further use within the affected function, so this is not a vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-30  
Modified Date
2008-09-05  
Seq
2006-6171  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
338042 64732 CVE-2006-6171 http://proftp.cvs.sourceforge.net/proftp/proftpd/src/main.c?r1=1.292&r2=1.293&sortby=date  View
338043 64732 CVE-2006-6171 SSA:2006-335-02  View
338044 64732 CVE-2006-6171 DSA-1218  View
338045 64732 CVE-2006-6171 DSA-1222  View
338046 64732 CVE-2006-6171 GLSA-200611-26  View
338047 64732 CVE-2006-6171 MDKSA-2006:217-1  View
338048 64732 CVE-2006-6171 OpenPKG-SA-2006.035  View
338049 64732 CVE-2006-6171 2006-0070  View
338050 64732 CVE-2006-6171 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820  View

Related JVN