CVE-2006-5815: ProFTPD Project ProFTPD

High severity, CVSS 10.0. EPSS: 75.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."

Affected products

• ProFTPD Project ProFTPD: up to and including 1.3.0

Published 2006-11-08. Last modified 2026-06-16.