CVE-2008-7265: Medium severity proftpd vulnerability
Published Nov 9, 2010
·Updated
The prdataxfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer.
Affected Software
48 affected components
ProFTPD ProFTPD=1.2.0-rc1
ProFTPD ProFTPD=1.2.0
ProFTPD ProFTPD=1.3.1-rc2
ProFTPD ProFTPD=1.3.0-rc1
ProFTPD ProFTPD=1.2.0-rc2
ProFTPD ProFTPD=1.2.0-pre10
ProFTPD ProFTPD=1.2.2-rc1
ProFTPD ProFTPD=1.3.0-a
ProFTPD ProFTPD=1.2.3
ProFTPD ProFTPD=1.3.0-rc4
ProFTPD ProFTPD=1.3.1-rc3
ProFTPD ProFTPD=1.2.5-rc1
ProFTPD ProFTPD=1.2.8-rc1
ProFTPD ProFTPD=1.2.7
ProFTPD ProFTPD=1.2.2
ProFTPD ProFTPD=1.2.7-rc2
ProFTPD ProFTPD=1.2.10
ProFTPD ProFTPD=1.2.10-rc2
ProFTPD ProFTPD=1.3.1
ProFTPD ProFTPD=1.2.8
ProFTPD ProFTPD=1.3.0
ProFTPD ProFTPD=1.2.10-rc1
ProFTPD ProFTPD=1.2.1
ProFTPD ProFTPD=1.3.1-rc1
ProFTPD ProFTPD=1.2.9-rc2
ProFTPD ProFTPD=1.2.7-rc1
ProFTPD ProFTPD=1.2.7-rc3
ProFTPD ProFTPD=1.3.0-rc5
ProFTPD ProFTPD=1.3.2-rc1
ProFTPD ProFTPD=1.2.4
ProFTPD ProFTPD=1.2.5
ProFTPD ProFTPD=1.2.0-pre9
ProFTPD ProFTPD=1.2.2-rc3
ProFTPD ProFTPD=1.2.5-rc3
ProFTPD ProFTPD=1.2.9-rc3
ProFTPD ProFTPD=1.2.0-rc3
ProFTPD ProFTPD=1.2.6-rc2
ProFTPD ProFTPD=1.2.5-rc2
ProFTPD ProFTPD=1.2.10-rc3
ProFTPD ProFTPD=1.2.9
ProFTPD ProFTPD<=1.3.2
ProFTPD ProFTPD=1.2.2-rc2
ProFTPD ProFTPD=1.2.8-rc2
ProFTPD ProFTPD=1.3.0-rc2
ProFTPD ProFTPD=1.2.6-rc1
ProFTPD ProFTPD=1.2.9-rc1
ProFTPD ProFTPD=1.2.6
ProFTPD ProFTPD=1.3.0-rc3
Remediation
Patch Available
Event History
Nov 9, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-7265?
CVE-2008-7265 is classified as a denial of service vulnerability.
2
How do I fix CVE-2008-7265?
To mitigate CVE-2008-7265, upgrade to ProFTPD version 1.3.2rc3 or later.
3
What impact does CVE-2008-7265 have on affected systems?
CVE-2008-7265 allows remote authenticated users to cause excessive CPU consumption on affected systems.
4
Which versions of ProFTPD are affected by CVE-2008-7265?
ProFTPD versions before 1.3.2rc3, including multiple 1.2.x versions, are affected by CVE-2008-7265.
5
Is CVE-2008-7265 a zero-day vulnerability?
CVE-2008-7265 is not classified as a zero-day vulnerability as it has been publicly disclosed.