CVE-2006-2212

CVE-2006-2212 describes a buffer overflow vulnerability in KarjaSoft Sami FTP Server version 2.0.2 and earlier. This flaw allows remote attackers to execute arbitrary code by sending an excessively long USER or PASS command during authentication. The vulnerability has a CVSS score of 6.4, indicating a medium severity, and can be exploited remotely with low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, suggesting a high potential for exploitation, though there is no evidence of active exploitation or significant community discussion.