Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

oftpd: denial of service

Package(s):

oftpd

CVE #(s):

CVE-2006-6767

Created:

January 16, 2007

Updated:

January 17, 2007

Description:

By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Remote, unauthenticated attackers may be able to terminate any oftpd process, denying service to legitimate users.

Alerts:

Gentoo

200701-09

2007-01-15

(Log in to post comments)