CVE-2006-6909 Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka Command line editor browser) 3.1.3 allows remote attackers to execute arbitrary code by operating an FTP server that sends directory....
HighCVSS 10.0
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka Command line editor browser) 3.1.3 allows remote attackers to execute arbitrary code by operating an FTP server that sends directory listings with (1) long user names or (2) long group names.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| karl dahlke edbrowse | = 3.1.3 | No fix listed |
References
- 20061231 edbrowse buffer overflow mailing-list
- sourceforge.net
- 21832 vdb-entry