PT-2006-7226 · Sambar · Sambar Server

Rgod · Published 2006-12-18 · Updated 2017-10-19 · CVE-2006-6624

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sambar Server version 6.4

Description The issue allows remote authenticated users to cause a denial of service, resulting in an application crash. This is achieved by sending a long series of "./" sequences in the SIZE command to the FTP Server.

Recommendations For Sambar Server version 6.4, consider restricting access to the FTP Server or limiting the length of commands to prevent the denial of service. As a temporary workaround, restrict the use of the SIZE command until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-6624

Affected Products

Sambar Server

References · 9

• 🔥 http://securityfocus.com/bid/21617 · Exploit
• 🔥 http://securityfocus.com/data/vulnerabilities/exploits/21617.php · Exploit
• 🔥 https://exploit-db.com/exploits/2934 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6624 · Security Note
• http://securitytracker.com/id?1017393 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6624 · Note
• http://secunia.com/advisories/23376 · Note
• http://vupen.com/english/advisories/2006/5041 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30920 · Note