Linux netkit_ftp 0.17_20040614
Approved changes feed: RSS · Atom
cpe:2.3:a:netkit-ftp:netkit_ftp:0.17:*:*:*:*:*:*:*
part: a version: 0.17 update: *
| Vendor | Netkit Ftp (f5d42936-f2dd-52cd-be84-12a462178286) |
|---|---|
| Product | Netkit Ftp (3c5a1349-c7da-5d40-baef-90aacde37e2e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/netkit-ftp |
purl2cpe | 2026-06-01 10:11:59.033171 |
pkg:deb/ubuntu/netkit-ftp |
purl2cpe | 2026-06-01 10:11:59.033172 |
pkg:github/mmaraya/netkit-ftp |
purl2cpe | 2026-06-01 10:11:59.033174 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-6263 |
vulnerable | 2026-06-08 04:50:08.363177 |
Details available
The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, when certain modifications to support SSL have been introduced, calls fclose on an uninitialized file stream, which allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via some types of FTP over SSL protocol behavior, as demonstrated by breaking a passive FTP DATA connection in a way that triggers an error in the server's SSL_accept function. NOTE: the netkit ftp issue is covered by CVE-2007-5769.
Published: 2007-12-06T15:00:00.000Z
Updated: 2024-08-07T16:02:36.274Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5769 |
vulnerable | 2026-06-08 04:50:07.009253 |
Details available
Double free vulnerability in the getreply function in ftp.c in netkit ftp (netkit-ftp) 0.17 20040614 and later allows remote FTP servers to cause a denial of service (application crash) and possibly have unspecified other impact via some types of FTP protocol behavior. NOTE: the netkit-ftpd issue is covered by CVE-2007-6263.
Published: 2007-12-06T15:00:00.000Z
Updated: 2024-08-07T15:39:13.934Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.