Stack-Based Buffer Overflow in ProFTPD Mod_Ctrls by The ProFTPD Project
CVE-2006-6563
Currently unrated
Key Information:
- Vendor
Proftpd Project
- Status
- Vendor
- CVE Published:
- 15 December 2006
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2006-6563?
A vulnerability exists in the mod_ctrls module of ProFTPD, where a stack-based buffer overflow can occur within the pr_ctrls_recv_request function. The flaw stems from handling a large reqarglen length, allowing local users to potentially execute arbitrary code on the host machine. This exploit poses a significant risk, as it enables an attacker to manipulate system functions and gain unauthorized access or control.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.