Description
oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV command with an unsupported address family, which triggers an assertion failure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/22073 ↗
- http://secunia.com/advisories/23797 ↗
- http://secunia.com/advisories/23790 ↗
- http://securitytracker.com/id?1017517 ↗
- http://www.vupen.com/english/advisories/2007/0198 ↗
- http://osvdb.org/32822 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200701-09.xml ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31520 ↗