CVE-2007-5769 Double free vulnerability in the getreply function in ftp.c in netkit ftp (netkit-ftp) 0.17 20040614 and later allows remote FTP servers to cause a denial of service (application crash) and possibly h...
HighCVSS 10.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in the getreply function in ftp.c in netkit ftp (netkit-ftp) 0.17 20040614 and later allows remote FTP servers to cause a denial of service (application crash) and possibly have unspecified other impact via some types of FTP protocol behavior. NOTE: the netkit-ftpd issue is covered by CVE-2007-6263.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netkit-ftp netkit ftp | = 0.17 | No fix listed |
References
- bugs.gentoo.org exploit patch
- cvs.fedora.redhat.com exploit
- 20071207 netkit-ftpd/ftp uninitialized vulnerability mailing-list
- 26764 vdb-entry