CVE-2006-6652

Description

Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long pathname that results from path expansion.

Weakness classification

• nvd@nist.gov: CWE-119

Primary references

• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory, VDB Entry
• cve@mitre.org — Broken Link
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory, US Government Resource
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry