CVE-2006-6576

Golden FTP Server <1.92 - Buffer Overflow

Title source: llm

Description

Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long PASS command. NOTE: it was later reported that 4.70 is also affected. NOTE: the USER vector is already covered by CVE-2005-0634.

Exploits (4)

exploitdb WORKING POC VERIFIED
by 1F98D · pythonremotewindows
https://www.exploit-db.com/exploits/49629
exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/17355
exploitdb WORKING POC VERIFIED
by cd1zz & iglesiasgg · rubyremotewindows
https://www.exploit-db.com/exploits/16036
metasploit WORKING POC NORMAL
by Craig Freyman, bannedit · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/goldenftp_pass_bof.rb

Scores

EPSS 0.8858
EPSS Percentile 99.5%

Details

CWE
CWE-787
Status published
Products (1)
goldenftpserver/golden_ftp_server 1.92
Published Dec 15, 2006
Tracked Since Feb 18, 2026