Buffer Overflow in ProFTPD mod_tls Module

CVE-2006-6170

What is CVE-2006-6170?

The mod_tls module in ProFTPD versions 1.3.0a and earlier contains a buffer overflow vulnerability in the tls_x509_name_oneline function. This flaw can be exploited by an attacker who sends a specially crafted large data length argument during pre-authentication, leading to the execution of arbitrary code on the vulnerable host. This vulnerability poses a significant risk as it allows unauthorized access and manipulation of server resources.

References