CVE-2006-6183: 3com 3ctftpsvc

High severity, CVSS 10.0. EPSS: 70.3% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long mode field (aka transporting mode) in a (1) GET or (2) PUT command.

Affected products

• 3com 3ctftpsvc: up to and including 2.0.1

Published 2006-12-01. Last modified 2026-06-16.