CVE-2006-6652

NetBSD-current <20050914 - NetBSD libc - RCE

Title source: llm

Description

Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long pathname that results from path expansion.

Exploits (2)

exploitdb WORKING POC VERIFIED
by kcope · perldosnetbsd_x86
https://www.exploit-db.com/exploits/29204
exploitdb WORKING POC VERIFIED
by kingcope · perldosbsd
https://www.exploit-db.com/exploits/2874

Scores

EPSS 0.3607
EPSS Percentile 97.1%

Details

CWE
CWE-119
Status published
Products (45)
apple/mac_os_x 10.0
apple/mac_os_x 10.0.1
apple/mac_os_x 10.0.2
apple/mac_os_x 10.0.3
apple/mac_os_x 10.0.4
apple/mac_os_x 10.1
apple/mac_os_x 10.1.1
apple/mac_os_x 10.1.2
apple/mac_os_x 10.1.3
apple/mac_os_x 10.1.4
... and 35 more
Published Dec 20, 2006
Tracked Since Feb 18, 2026