{"id":"CVE-2006-5815","state":"PUBLISHED","title":"Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrar","description":"Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a \"ProFTPD remote exploit.\"","publishedAt":"2006-11-08T23:00:00.000Z","updatedAt":"2024-08-07T20:04:55.597Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.vupen.com/english/advisories/2006/4451","http://gleg.net/vulndisco_meta.shtml","http://www.debian.org/security/2006/dsa-1222","http://www.mandriva.com/security/advisories?name=MDKSA-2006:217","http://secunia.com/advisories/23207","http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491","http://www.trustix.org/errata/2006/0066/","http://www.securityfocus.com/archive/1/452760/100/200/threaded","http://securitytracker.com/id?1017167","http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.035-proftpd.html","http://secunia.com/advisories/23174","http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1","https://exchange.xforce.ibmcloud.com/vulnerabilities/30147","http://www.trustix.org/errata/2006/0070","http://secunia.com/advisories/23069","http://secunia.com/advisories/23000","https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820","http://secunia.com/advisories/22821","http://secunia.com/advisories/23184","http://secunia.com/advisories/23125","http://www.securityfocus.com/bid/20992","http://bugs.proftpd.org/show_bug.cgi?id=2858","http://secunia.com/advisories/23179","http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml","http://secunia.com/advisories/22803"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:54.716Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2006/5xxx/CVE-2006-5815.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2006-5815","state":"PUBLISHED","datePublished":"2006-11-08T23:00:00.000Z","dateUpdated":"2024-08-07T20:04:55.597Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2006-11-08T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a \"ProFTPD remote exploit.\""}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/4451","name":"ADV-2006-4451","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://gleg.net/vulndisco_meta.shtml","tags":["x_refsource_MISC"]},{"url":"http://www.debian.org/security/2006/dsa-1222","name":"DSA-1222","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:217","name":"MDKSA-2006:217","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://secunia.com/advisories/23207","name":"23207","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491","name":"SSA:2006-335-02","tags":["vendor-advisory","x_refsource_SLACKWARE"]},{"url":"http://www.trustix.org/errata/2006/0066/","name":"2006-0066","tags":["vendor-advisory","x_refsource_TRUSTIX"]},{"url":"http://www.securityfocus.com/archive/1/452760/100/200/threaded","name":"20061127 CVE-2006-5815: remote code execution in ProFTPD","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://securitytracker.com/id?1017167","name":"1017167","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.035-proftpd.html","name":"OpenPKG-SA-2006.035","tags":["vendor-advisory","x_refsource_OPENPKG"]},{"url":"http://secunia.com/advisories/23174","name":"23174","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1","name":"MDKSA-2006:217-1","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30147","name":"proftpd-code-execution(30147)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.trustix.org/errata/2006/0070","name":"2006-0070","tags":["vendor-advisory","x_refsource_TRUSTIX"]},{"url":"http://secunia.com/advisories/23069","name":"23069","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/23000","name":"23000","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/22821","name":"22821","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/23184","name":"23184","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/23125","name":"23125","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/20992","name":"20992","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=2858","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/23179","name":"23179","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml","name":"GLSA-200611-26","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://secunia.com/advisories/22803","name":"22803","tags":["third-party-advisory","x_refsource_SECUNIA"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2006-11-06T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5815","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a \"ProFTPD remote exploit.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2006-4451","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/4451"},{"name":"http://gleg.net/vulndisco_meta.shtml","refsource":"MISC","url":"http://gleg.net/vulndisco_meta.shtml"},{"name":"DSA-1222","refsource":"DEBIAN","url":"http://www.debian.org/security/2006/dsa-1222"},{"name":"MDKSA-2006:217","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:217"},{"name":"23207","refsource":"SECUNIA","url":"http://secunia.com/advisories/23207"},{"name":"SSA:2006-335-02","refsource":"SLACKWARE","url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491"},{"name":"2006-0066","refsource":"TRUSTIX","url":"http://www.trustix.org/errata/2006/0066/"},{"name":"20061127 CVE-2006-5815: remote code execution in ProFTPD","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/452760/100/200/threaded"},{"name":"1017167","refsource":"SECTRACK","url":"http://securitytracker.com/id?1017167"},{"name":"OpenPKG-SA-2006.035","refsource":"OPENPKG","url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.035-proftpd.html"},{"name":"23174","refsource":"SECUNIA","url":"http://secunia.com/advisories/23174"},{"name":"MDKSA-2006:217-1","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1"},{"name":"proftpd-code-execution(30147)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30147"},{"name":"2006-0070","refsource":"TRUSTIX","url":"http://www.trustix.org/errata/2006/0070"},{"name":"23069","refsource":"SECUNIA","url":"http://secunia.com/advisories/23069"},{"name":"23000","refsource":"SECUNIA","url":"http://secunia.com/advisories/23000"},{"name":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820"},{"name":"22821","refsource":"SECUNIA","url":"http://secunia.com/advisories/22821"},{"name":"23184","refsource":"SECUNIA","url":"http://secunia.com/advisories/23184"},{"name":"23125","refsource":"SECUNIA","url":"http://secunia.com/advisories/23125"},{"name":"20992","refsource":"BID","url":"http://www.securityfocus.com/bid/20992"},{"name":"http://bugs.proftpd.org/show_bug.cgi?id=2858","refsource":"CONFIRM","url":"http://bugs.proftpd.org/show_bug.cgi?id=2858"},{"name":"23179","refsource":"SECUNIA","url":"http://secunia.com/advisories/23179"},{"name":"GLSA-200611-26","refsource":"GENTOO","url":"http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml"},{"name":"22803","refsource":"SECUNIA","url":"http://secunia.com/advisories/22803"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.vupen.com/english/advisories/2006/4451","name":"ADV-2006-4451","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://gleg.net/vulndisco_meta.shtml","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.debian.org/security/2006/dsa-1222","name":"DSA-1222","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:217","name":"MDKSA-2006:217","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/23207","name":"23207","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491","name":"SSA:2006-335-02","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"]},{"url":"http://www.trustix.org/errata/2006/0066/","name":"2006-0066","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/452760/100/200/threaded","name":"20061127 CVE-2006-5815: remote code execution in ProFTPD","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://securitytracker.com/id?1017167","name":"1017167","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.035-proftpd.html","name":"OpenPKG-SA-2006.035","tags":["vendor-advisory","x_refsource_OPENPKG","x_transferred"]},{"url":"http://secunia.com/advisories/23174","name":"23174","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1","name":"MDKSA-2006:217-1","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30147","name":"proftpd-code-execution(30147)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.trustix.org/errata/2006/0070","name":"2006-0070","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"]},{"url":"http://secunia.com/advisories/23069","name":"23069","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23000","name":"23000","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/22821","name":"22821","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23184","name":"23184","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23125","name":"23125","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/20992","name":"20992","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=2858","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/23179","name":"23179","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml","name":"GLSA-200611-26","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://secunia.com/advisories/22803","name":"22803","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T20:04:55.597Z"}}]}}}