CVE-2007-0247

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

20.15% chance of exploitation in the next 30 days, 97th percentile

Published

2007-01-16

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29473

Security advisories

• http://secunia.com/advisories/23767
• http://secunia.com/advisories/23805
• http://secunia.com/advisories/23810
• http://secunia.com/advisories/23837
• http://secunia.com/advisories/23889
• http://secunia.com/advisories/23921
• http://secunia.com/advisories/23946
• http://www.vupen.com/english/advisories/2007/0199
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:026
• http://www.securityfocus.com/bid/22079
• http://www.ubuntu.com/usn/usn-414-1

References

• CVE Record
• NVD entry