Description
Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | proftpd-dfsg | 1.3.0-16 | — |
| Debian 13 | proftpd-dfsg | 1.3.0-16 | — |
| Debian 12 | proftpd-dfsg | 1.3.0-16 | — |
| Debian 3.1 | proftpd | 1.2.10-15sarge3 | DSA-1222-1 |
Advisories 1
- DSA-1222-1 proftpd Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-1222 vendor-advisory
- 20061128 ProFTPD mod_tls pre-authentication buffer overflow mailing-list
- 20061129 Re: ProFTPD mod_tls pre-authentication buffer overflow mailing-list
- 23207 third-party-advisory
- SSA:2006-335-02 vendor-advisory
- 23141 third-party-advisory
- 23174 third-party-advisory
- MDKSA-2006:217-1 vendor-advisory
- 21326 vdb-entry
- 20061128 ProFTPD mod_tls pre-authentication buffer overflow mailing-list
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820
- 23184 third-party-advisory
- http://elegerov.blogspot.com/2006/10/do-you-remember-2-years-old-overflow.html
- 2006-0066 vendor-advisory
- 23179 third-party-advisory
- GLSA-200611-26 vendor-advisory
- 20061121 Re: [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities mailing-list
- proftpd-modtls-bo(30554) vdb-entry
- ADV-2006-4745 vdb-entry