PT-2007-6632 · 3Proxy · 3Proxy

Publicado 2007-10-29 · Atualizado 2018-10-15 · CVE-2007-5622

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions 3proxy versions 0.5 through 0.5.3i

Description A double free issue in the ftpprchild function in ftppr allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending multiple OPEN commands to the FTP proxy.

Recommendations For versions 0.5 through 0.5.3i, consider restricting access to the FTP proxy to minimize the risk of exploitation until a patch is available. As a temporary workaround, limiting the number of OPEN commands to the FTP proxy may help mitigate the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-5622

Produtos afetados

3Proxy

Referências · 11

• http://security.gentoo.org/glsa/glsa-200711-13.xml · Aviso do Fabricante
• http://secunia.com/advisories/27607 · Aviso do Fabricante
• http://securityfocus.com/archive/1/482697/100/0/threaded · Nota
• http://secunia.com/advisories/27353 · Aviso do Fabricante
• http://bugs.gentoo.org/show_bug.cgi?id=196772 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066985.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37401 · Nota
• http://securityfocus.com/bid/26180 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5622 · Nota de Segurança
• http://osvdb.org/41870 · Nota
• http://3proxy.ru/0.5.3j/Changelog.txt · Correção