CVE-2006-6170
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1...
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
- Record
CVE-2006-6170- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
- Record
CVE-2006-6170- Updated
- 2026-11-02
EUVDEUVD-2006-6153 No score
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
- Record
EUVD-2006-6153- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9qxv-mv47-gw7g No score
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1...
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
- Record
GHSA-9qxv-mv47-gw7g- Updated
- 2026-11-02
OSV No score
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
- Record
CVE-2006-6170- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-6170 No score
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
- Record
DEBIAN-CVE-2006-6170- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
proftpd-dfsgDebian:12 |
before 1.3.0-16 | 1.3.0-16 |
proftpd-dfsgDebian:13 |
before 1.3.0-16 | 1.3.0-16 |
proftpd-dfsgDebian:14 |
before 1.3.0-16 | 1.3.0-16 |
proftpdDebian:3.1 From an advisory covering 2 CVEs |
before 1.2.10-15sarge3, plus listed versions 1.2.10-151.2.10-15sarge11.2.10-15sarge1.0.11.2.10-15sarge2 |
1.2.10-15sarge3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6170 is a high vulnerability (CVSS 7.5) in Proftpd Project Proftpd, published November 30, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.1%, the 97th percentile. Fixed in proftpd-dfsg 1.3.0-16.
References
debian.org/security/2006/dsa-1222
lists.grok.org.uk/pipermail/full-disclosure/2006-November/050935.html
securityfocus.com/archive/1/452993/100/100/threaded
secunia.com/advisories/23207
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491
Show 16 moreShow less
mandriva.com/security/advisories?name=MDKSA-2006:217-1
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820
elegerov.blogspot.com/2006/10/do-you-remember-2-years-old-overflow.html
trustix.org/errata/2006/0066
gentoo.org/security/en/glsa/glsa-200611-26.xml
exchange.xforce.ibmcloud.com/vulnerabilities/30554
vupen.com/english/advisories/2006/4745
nvd.nist.gov/vuln/detail/CVE-2006-6170
github.com/advisories/GHSA-9qxv-mv47-gw7g
security-tracker.debian.org/tracker/CVE-2006-6170