CVE-2006-6750

XM Easy Personal FTP Server 5.0.1 - DoS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-6750. PoCs published by Jerome Athias.

AI-analyzed exploit summary This Perl script exploits a buffer overflow vulnerability in XM Easy Personal FTP Server 5.0.1 by sending an overly long PORT command, causing a denial of service (DoS). It uses the Net::FTP module to connect and trigger the vulnerability.

Description

Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a long PORT command. NOTE: this issue might be related to CVE-2006-2226.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Jerome Athias · perldoswindows
https://www.exploit-db.com/exploits/1949

This Perl script exploits a buffer overflow vulnerability in XM Easy Personal FTP Server 5.0.1 by sending an overly long PORT command, causing a denial of service (DoS). It uses the Net::FTP module to connect and trigger the vulnerability.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: XM Easy Personal FTP Server 5.0.1
Auth required
Prerequisites: Network access to the target FTP server · Valid credentials (or anonymous access)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18632

Scores

EPSS 0.0206
EPSS Percentile 78.8%

Details

Status published
Products (1)
dxmsoft/xm_easy_personal_ftp_server 5.0.1
Published Dec 27, 2006
Tracked Since Feb 18, 2026