CVE-2007-5622: Double Free
Published Oct 29, 2007
·Updated
Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service (daemon crash) via multiple OPEN commands to the FTP proxy.
Affected Software
6 affected components
3proxy 3proxy=0.5.3i
3proxy 3proxy=0.5.1
3proxy 3proxy=0.5.3h
3proxy 3proxy=0.5.3g
3proxy 3proxy=0.5
3proxy 3proxy=0.5.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Oct 29, 2007
CVE Published
09:46 PM
Oct 30, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the risk level of CVE-2007-5622?
CVE-2007-5622 has a risk level of 26, which is classified as medium severity.
2
What type of vulnerability is CVE-2007-5622?
CVE-2007-5622 is classified as a double free vulnerability.
3
How does CVE-2007-5622 impact software stability?
CVE-2007-5622 allows remote attackers to cause a denial of service, leading to a daemon crash.
4
Is there a fix available for CVE-2007-5622?
Yes, a patch is available to fix CVE-2007-5622.
5
In which versions of 3proxy is CVE-2007-5622 present?
CVE-2007-5622 affects 3proxy versions 0.5 through 0.5.3i.