CVE-2007-0247 - Secunia.com

CVE Reference: CVE-2007-0247
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0247

Description: squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/31523 UBUNTU http://www.ubuntu.com/usn/usn-414-1 TRUSTIX http://www.trustix.org/errata/2007/0003/ SUSE http://www.novell.com/linux/security/advisories/2007_12_squid.html SAID Secunia Advisory: SA23805 Secunia Advisory: SA23837 Secunia Advisory: SA23889 Secunia Advisory: SA23767 Secunia Advisory: SA23810 Secunia Advisory: SA23921 Secunia Advisory: SA23946 OSVDB 39839 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:026 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml FEDORA http://fedoranews.org/cms/node/2442 CONFIRM http://www.squid-cache.org/bugs/show_bug.cgi?id=1857 http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12 BID 22079

Return to the previous page.

Secunia