CVE-2006-6652

CVE-2006-6652 is a critical buffer overflow vulnerability in the glob implementation of libc, affecting NetBSD and Apple Mac OS X. This flaw allows remote authenticated attackers to execute arbitrary code by providing a long pathname during path expansion, particularly when interacting with FTP daemons like tnftpd. With a CVSS score of 9.0, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, indicating a high potential for exploitation despite a lack of observed active exploitation or community discussion.