CVE-2006-2172

Buffer overflow in Gene6 FTP Server 3.1.0 allows remote authenticated attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to (1) MKD or (2) XMKD, as demonstrated by the Infigo FTPStress Fuzzer.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-05-04

Last modified

2024-08-07

Affected products

• G6 Ftp Server (Gene6)

References

• http://secunia.com/advisories/19965
• http://www.infigo.hr/en/in_focus/tools
• http://www.osvdb.org/25238
• http://www.securityfocus.com/archive/1/432839/100/0/threaded
• http://www.securityfocus.com/bid/17810
• http://www.vupen.com/english/advisories/2006/1658
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26237