CVE-2007-5962 Denial of service in n/a
Remote attackers can cause denial of service via memory exhaustion using CWD commands in vsftpd with specific Red Hat patches and deny_file configuration.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-5962?
CVE-2007-5962 is a high-severity denial of service vulnerability in Redhat Enterprise Linux, published on 22 May 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.
Weakness: CWE-399
Which versions are affected by CVE-2007-5962?
It affects 4 products.
Linux distribution packages (4)
vsftpd Red Hat:enterprise_linux:5::client_workstation | All versions | 0:2.0.5-12.el5 |
vsftpd-debuginfo Red Hat:enterprise_linux:5::client_workstation | All versions | 0:2.0.5-12.el5 |
vsftpd Red Hat:enterprise_linux:5::server | All versions | 0:2.0.5-12.el5 |
vsftpd-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:2.0.5-12.el5 |
Products include Foresight Linux Appliances, Redhat Enterprise Linux, Redhat Fedora, Rpath Appliance Platform Agent.
How do I fix CVE-2007-5962?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2007-5962 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-5962 exists.
Public exploit code: 3 Exploit-DB entries and 1 proofs of concept on GitHub.
Sources
Also known as GHSA-67jj-2hgw-486p, RHSA-2008:0295.