CVE Vulnerability

CVE-2007-5622

Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service (daemon crash) via multiple OPEN commands to the FTP proxy.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

References
Link Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066985.html
http://3proxy.ru/0.5.3j/Changelog.txt Patch
http://www.securityfocus.com/bid/26180 Patch
http://secunia.com/advisories/27353 Patch Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=196772
http://security.gentoo.org/glsa/glsa-200711-13.xml
http://secunia.com/advisories/27607 Vendor Advisory
http://osvdb.org/41870
https://exchange.xforce.ibmcloud.com/vulnerabilities/37401
http://www.securityfocus.com/archive/1/482697/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:3proxy:3proxy:0.5.3i:*:*:*:*:*:*:*
cpe:2.3:a:3proxy:3proxy:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:3proxy:3proxy:0.5.3h:*:*:*:*:*:*:*
cpe:2.3:a:3proxy:3proxy:0.5.3g:*:*:*:*:*:*:*
cpe:2.3:a:3proxy:3proxy:0.5:*:*:*:*:*:*:*
cpe:2.3:a:3proxy:3proxy:0.5.2:*:*:*:*:*:*:*
Information

Published : 2007-10-29 09:46

Updated : 2018-10-15 09:45

NVD link : CVE-2007-5622

Mitre link : CVE-2007-5622

Products Affected
No products.
CWE
CWE-399