CVE-2007-5622 Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service (daemon crash) via multiple OPEN commands to the FTP pro...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service (daemon crash) via multiple OPEN commands to the FTP proxy.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3proxy | = 0.5 | No fix listed |
| 3proxy | = 0.5.1 | No fix listed |
| 3proxy | = 0.5.2 | No fix listed |
| 3proxy | = 0.5.3g | No fix listed |
| 3proxy | = 0.5.3h | No fix listed |
| 3proxy | = 0.5.3i | No fix listed |
References
- 3proxy.ru patch
- bugs.gentoo.org
- 20071023 3proxy double free vulnerability mailing-list
- 41870 vdb-entry
- 27353 patch third-party-advisory vendor-advisory
- 27607 third-party-advisory vendor-advisory
- GLSA-200711-13 vendor-advisory
- 20071023 3proxy 0.5.3j released (bugfix) mailing-list
- 26180 patch vdb-entry
- 3proxy-ftpprchild-dos(37401) vdb-entry