CVE-2006-6563: ProFTPD Project ProFTPD

Medium severity, CVSS 6.6. EPSS: 2.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.

Affected products

• ProFTPD Project ProFTPD: version 1.3.0 only; version 1.3.0a only

Published 2006-12-15. Last modified 2026-06-16.