CVE-2007-3768 - The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of

CVE-2007-3768

Summary

The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) via a malformed response to a PASV command.

References

Vulnerable Configurations

cpe:2.3:a:netwin:surgeftp:1.1h:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:1.1h:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.0c:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.0c:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.0e:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.0e:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.0f:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.0f:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.2k1:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.2k1:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.2k3:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.2k3:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.2m1:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.2m1:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.3a1:*:*:*:*:*:*:*
cpe:2.3:a:netwin:surgeftp:2.3a1:*:*:*:*:*:*:*

CVSS

Base:	8.5 (as of 29-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:P/A:C

refmap via4

fulldisc	20070710 Portcullis Computer Security Ltd - Advisories
misc	http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070710/98374694/attachment-0030.txt
osvdb	37909
secunia	26061
sreason	2883
vupen	ADV-2007-2528
xf	surgeftp-pasv-dos(35376)

Last major update

29-07-2017 - 01:32

Published

15-07-2007 - 21:30

Last modified

29-07-2017 - 01:32