CVE-2007-6263

CRITICO 9.3CVE-2007-6263 · Published 06/12/2007 · updated 16/06/2026

In breve

CVE-2007-6263 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda netkit ftp (netkit-ftp).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
netkit ftp netkit-ftp	`= 0.17`	No fix yet

Description

The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, when certain modifications to support SSL have been introduced, calls fclose on an uninitialized file stream, which allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via some types of FTP over SSL protocol behavior, as demonstrated by breaking a passive FTP DATA connection in a way that triggers an error in the server's SSL_accept function. NOTE: the netkit ftp issue is covered by CVE-2007-5769.

References

Altre vulnerabilità di netkit ftp

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free