CVE-2006-5815
proftpd
EPSS 74.3%
描述
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."
如何修補 CVE-2006-5815
要修補 CVE-2006-5815,請將受影響套件升級到下列已修補版本。
- Debian/proftpd—升級至 1.2.10-15sarge3 或更新版本
- Debian/proftpd-dfsg—升級至 1.3.0-15 或更新版本
CVE-2006-5815 正在被利用嗎?
可能 — EPSS 為 74.3%,屬於高被利用機率區間,建議優先修補。
受影響套件(2)
- from 0, < 1.2.10-15sarge3
- from 0, < 1.3.0-15