CVE-2006-6563
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls...
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
- Record
CVE-2006-6563- CVSS 2.0
- 6.6 Medium
AV:L/AC:M/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
- Record
CVE-2006-6563- Updated
- 2026-11-02
EUVDEUVD-2006-6546 No score
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
- Record
EUVD-2006-6546- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gw7g-g6w4-pgq8 No score
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls...
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
- Record
GHSA-gw7g-g6w4-pgq8- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
- Record
CVE-2006-6563- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-6563 No score
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
- Record
DEBIAN-CVE-2006-6563- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
proftpd-dfsgDebian:12 |
before 1.3.0-17 | 1.3.0-17 |
proftpd-dfsgDebian:13 |
before 1.3.0-17 | 1.3.0-17 |
proftpd-dfsgDebian:14 |
before 1.3.0-17 | 1.3.0-17 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ProFTPd 1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (PoC) | 2006-12-13 |
| Exploit-DB | ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (1) | 2007-02-18 |
| Exploit-DB | ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (2) | 2007-02-19 |
| Exploit-DB | ProFTPd - 'ftpdctl' 'pr_ctrls_connect' Local Overflow | 2004-08-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6563 is a medium vulnerability (CVSS 6.6) in Proftpd Project Proftpd, published December 15, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. Fixed in proftpd-dfsg 1.3.0-17.
References
securityfocus.com/bid/21587
mandriva.com/security/advisories?name=MDKSA-2006:232
proftpd.org/docs/NEWS-1.3.1rc1
coresecurity.com?module=ContentMod&action=item&id=1594
Show 14 moreShow less
openpkg.com/security/advisories/OpenPKG-SA-2006.039.html
exploit-db.com/exploits/3330
secunia.com/advisories/24163
security.gentoo.org/glsa/glsa-200702-02.xml
vupen.com/english/advisories/2006/4998
exchange.xforce.ibmcloud.com/vulnerabilities/30906
trustix.org/errata/2006/0074
nvd.nist.gov/vuln/detail/CVE-2006-6563
github.com/advisories/GHSA-gw7g-g6w4-pgq8
security-tracker.debian.org/tracker/CVE-2006-6563