PT-2006-7226 · Sambar · Sambar Server

Rgod · Publicado 2006-12-18 · Atualizado 2017-10-19 · CVE-2006-6624

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sambar Server version 6.4

Description The issue allows remote authenticated users to cause a denial of service, resulting in an application crash. This is achieved by sending a long series of "./" sequences in the SIZE command to the FTP Server.

Recommendations For Sambar Server version 6.4, consider restricting access to the FTP Server or limiting the length of commands to prevent the denial of service. As a temporary workaround, restrict the use of the SIZE command until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-6624

Produtos afetados

Sambar Server

Referências · 9

• 🔥 http://securityfocus.com/bid/21617 · Exploit
• 🔥 http://securityfocus.com/data/vulnerabilities/exploits/21617.php · Exploit
• 🔥 https://exploit-db.com/exploits/2934 · Exploit
• http://securitytracker.com/id?1017393 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6624 · Nota
• http://secunia.com/advisories/23376 · Nota
• http://vupen.com/english/advisories/2006/5041 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30920 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6624 · Nota de Segurança