NetSight
IP …
high7.1Public exploit code

CVE-2007-5962

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath a…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux
Version 5.0
RedhatFedora
Versions 6, 7, 8
Foresight LinuxAppliances
All versions
RpathAppliance Platform Agent
All versions

Weakness classification

CWE-399

References