CVE-2007-2010 Double free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial of service (daemon crash) via a (1) get or (2) mget command.
MediumCVSS 6.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial of service (daemon crash) via a (1) get or (2) mget command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bftpd | <= 1.7.2 | No fix listed |
References
- bftpd.sourceforge.net
- bftpd.sourceforge.net
- 34889 vdb-entry
- 24864 patch third-party-advisory vendor-advisory
- 23406 vdb-entry
- ADV-2007-1347 vdb-entry
- bftpd-getmget-dos(33594) vdb-entry