CVE-2006-6576: Goldenftpserver Golden FTP Server

High severity, CVSS 7.5. EPSS: 67.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long PASS command. NOTE: it was later reported that 4.70 is also affected. NOTE: the USER vector is already covered by CVE-2005-0634.

Affected products

Published 2006-12-15. Last modified 2026-06-16.