PT-2006-7506 · Karl Dahlke · Karl Dahlke Edbrowse

Published 2006-12-31 · Updated 2016-10-18 · CVE-2006-6909

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Karl Dahlke Edbrowse (aka Command line editor browser) version 3.1.3

Description: A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code. This can be achieved by operating an FTP server that sends directory listings with long user names or long group names.

Recommendations: For version 3.1.3, update to a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2006-6909

Affected Products

Karl Dahlke Edbrowse

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-6909 · Security Note
• http://securityfocus.com/bid/21832 · Note
• http://marc.info/?l=full-disclosure&m=116760539609173&w=2 · Note
• http://sourceforge.net/tracker/index.php?func=detail&aid=1622117&group_id=141946&atid=751061 · Note