CVE-2007-0247 squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish...
MediumCVSS 5.0
EPSS 20.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squid | = 2.6.stable1 | No fix listed |
| squid | = 2.6.stable2 | No fix listed |
| squid | = 2.6.stable3 | No fix listed |
| squid | = 2.6.stable4 | No fix listed |
| squid | = 2.6.stable5 | No fix listed |
| squid | = 2.6.stable6 | No fix listed |
| debian/squid(Debian:12) | < 2.6.5-4 | 2.6.5-4 |
| debian/squid(Debian:13) | < 2.6.5-4 | 2.6.5-4 |
| debian/squid(Debian:14) | < 2.6.5-4 | 2.6.5-4 |
References
- Debian Security Tracker CVE-2007-0247 vendor-advisory
- FEDORA-2007-092 vendor-advisory
- 39839 vdb-entry
- 23767 third-party-advisory vendor-advisory
- 23805 third-party-advisory vendor-advisory
- 23810 third-party-advisory vendor-advisory
- 23837 third-party-advisory vendor-advisory
- 23889 third-party-advisory vendor-advisory
- 23921 third-party-advisory vendor-advisory
- 23946 third-party-advisory vendor-advisory
- GLSA-200701-22 vendor-advisory
- MDKSA-2007:026 vendor-advisory
- SUSE-SA:2007:012 vendor-advisory
- 22079 vdb-entry
- www.squid-cache.org
- www.squid-cache.org
- 2007-0003 vendor-advisory
- USN-414-1 vendor-advisory
- ADV-2007-0199 vdb-entry vendor-advisory
- squid-multiple-dos(31523) vdb-entry