CVE-2007-6263 The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, when certain modifications to support SSL have been introduced, calls fclose on an uninitialized file stream, which allows remote att...
HighCVSS 9.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, when certain modifications to support SSL have been introduced, calls fclose on an uninitialized file stream, which allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via some types of FTP over SSL protocol behavior, as demonstrated by breaking a passive FTP DATA connection in a way that triggers an error in the server's SSL_accept function. NOTE: the netkit ftp issue is covered by CVE-2007-5769.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netkit-ftp netkit ftp | = 0.17 | No fix listed |
| debian/linux-ftpd-ssl(Debian:12) | < 0.17.18+0.3-9.1 | 0.17.18+0.3-9.1 |
References
- bugs.gentoo.org exploit
- 20071207 netkit-ftpd/ftp uninitialized vulnerability mailing-list
- 41191 vdb-entry
- 28697 third-party-advisory
- GLSA-200801-17 vendor-advisory
- 26763 vdb-entry
- Debian Security Tracker CVE-2007-6263 vendor-advisory
- bugs.debian.org issue-tracking