Buffer overflow in Apple Mac Os X

CVE-2006-6652

Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long pathname that results from path expansion.

Vulnerability class: Buffer Overflow

EPSS: 0.196 (97.1th percentile) — read the EPSS interpretation.

Affected products

  • Apple Mac_os_x — versions 10.0, 10.0.1, 10.0.2
  • Netbsd — versions 2.0, 2.1, 3.0
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (vendor-advisory, x_refsource_NETBSD, Patch, Vendor Advisory)
  • cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
  • cve@mitre.org (vendor-advisory, x_refsource_APPLE, Vendor Advisory)