« Volver al listado

CVE-2006-2226

Estado: ModificadaMedia (5)—

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Dxmsoft — XM Easy Personal FTP Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-2226",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-05-05T19:02:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/19970",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.packetstormsecurity.org/0606-exploits/xmepftp.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/18711",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/1552",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/19970",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.packetstormsecurity.org/0606-exploits/xmepftp.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/18711",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/1552",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en XM Easy Personal FTP Server 4.2 y 5.0.1 permite a usuarios remotos validados causar una denegación de servicio mediante un argumento largo al comando \"PORT\".\r\n"
    }
  ],
  "lastModified": "2026-06-16T22:24:35.957",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59536D76-CD94-496D-B605-F64876FD1BBA"
            },
            {
              "criteria": "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:5.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E80D2C1-0624-4D62-AD67-F882B661C12D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}