| Vulnerability Name: | CVE-2006-6183 (CCN-30545) | ||||||||
| Assigned: | 2006-11-26 | ||||||||
| Published: | 2006-11-26 | ||||||||
| Updated: | 2018-10-17 | ||||||||
| Summary: | Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long mode field (aka transporting mode) in a (1) GET or (2) PUT command. | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C) 9.0 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:U/RC:UR)
9.0 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:U/RC:UR)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Sun Nov 26 2006 - 06:31:48 CST TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode) Source: MITRE Type: CNA CVE-2006-6183 Source: CCN Type: SA23113 3CTftpSvc TFTP Server Long Mode Buffer Overflow Vulnerability Source: SECUNIA Type: Vendor Advisory 23113 Source: SREASON Type: UNKNOWN 1930 Source: CCN Type: 3Com Web site 3Com Software Library Source: CCN Type: OSVDB ID: 30758 3com 3CTftpSvc TFTP Server Long Transporting Mode Overflow Source: CCN Type: OSVDB ID: 31512 3Com TFTP Service Long Transporting Mode Overflow Source: BUGTRAQ Type: UNKNOWN 20061126 TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode) Source: BID Type: Exploit 21301 Source: CCN Type: BID-21301 3Com TFTP Transporting Mode Remote Buffer Overflow Vulnerability Source: BID Type: Exploit 21322 Source: CCN Type: BID-21322 3Com 3CTftpSvc Filename Remote Buffer Overflow Vulnerability Source: VUPEN Type: Vendor Advisory ADV-2006-4738 Source: XF Type: UNKNOWN 3ctftpsvc-transporting-mode-bo(30545) Source: XF Type: UNKNOWN 3ctftpsvc-transporting-mode-bo(30545) Source: CCN Type: Rapid7 Vulnerability and Exploit Database [11-27-2021] 3CTftpSvc TFTP Long Mode Buffer Overflow | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||