CVE-2006-6652: Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* a...

Security readout for executives and security teams

This is an old but serious memory-safety flaw in NetBSD libc glob path expansion, also referenced for Apple Mac OS X before Security Update 2007-004. If exposed through FTP services, an authenticated remote user could potentially run code on the server. Exposure is most likely on legacy NetBSD or old Mac OS X systems running FTP daemons that accept authenticated users. Modern systems are unlikely to be affected unless they retain vulnerable libc or bundled FTP components. Treat as high priority only where legacy NetBSD, old Mac OS X, or FTP services remain in scope. For current managed endpoints, priority is usually inventory confirmation rather than emergency response. Mitigation focus: Upgrade affected NetBSD systems beyond the cited vulnerable build dates.; Apply Apple Security Update 2007-004 or later vendor-supported updates.; Disable ftpd or tnftpd where business use is not required..

Prepared

Jun 29, 2026, 08:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.