CVE		CVE-2006-5815
Status		Candidate
Description		Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers to cause a denial of service, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."
Severity		Low
CVSS score		2,3
CVSS vector		(AV:R/AC:L/Au:NR/C:N/I:N/A:P/B:N)
Phase		Assigned (08.11.2006)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5815
References		BID : 20992
		BUGTRAQ : 20061127 CVE-2006-5815: remote code execution in ProFTPD
		CONFIRM : http://bugs.proftpd.org/show_bug.cgi?id=2858
		CONFIRM : https://bugzilla.redhat.com/bugzilla/show_bug.cgi?...
		DEBIAN : DSA-1222
		FRSIRT : ADV-2006-4451
		GENTOO : GLSA-200611-26
		MANDRIVA : MDKSA-2006:217-1
		MANDRIVA : MDKSA-2006:217
		MISC : http://gleg.net/vulndisco_meta.shtml
		OPENPKG : OpenPKG-SA-2006.035
		SECTRACK : 1017167
		SECUNIA : 22803
		SECUNIA : 22821
		SECUNIA : 23000
		SECUNIA : 23069
		SECUNIA : 23125
		SECUNIA : 23174
		SECUNIA : 23179
		SECUNIA : 23184
		SECUNIA : 23207
		SLACKWARE : SSA:2006-335-02
		TRUSTIX : 2006-0066
		TRUSTIX : 2006-0070
		XF : proftpd-code-execution(30147)