Lucene search

K
cve[email protected]CVE-2008-7265
HistoryNov 09, 2010 - 9:00 p.m.

CVE-2008-7265

2010-11-0921:00:02
CWE-399
web.nvd.nist.gov
296
cve-2008-7265
proftpd
denial of service
cpu consumption
abor command

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.0%

The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer.

Affected configurations

NVD
Node
proftpdproftpdRange1.3.2rc2
OR
proftpdproftpdMatch1.2.0
OR
proftpdproftpdMatch1.2.0pre10
OR
proftpdproftpdMatch1.2.0pre9
OR
proftpdproftpdMatch1.2.0rc1
OR
proftpdproftpdMatch1.2.0rc2
OR
proftpdproftpdMatch1.2.0rc3
OR
proftpdproftpdMatch1.2.1
OR
proftpdproftpdMatch1.2.2
OR
proftpdproftpdMatch1.2.2rc1
OR
proftpdproftpdMatch1.2.2rc2
OR
proftpdproftpdMatch1.2.2rc3
OR
proftpdproftpdMatch1.2.3
OR
proftpdproftpdMatch1.2.4
OR
proftpdproftpdMatch1.2.5
OR
proftpdproftpdMatch1.2.5rc1
OR
proftpdproftpdMatch1.2.5rc2
OR
proftpdproftpdMatch1.2.5rc3
OR
proftpdproftpdMatch1.2.6
OR
proftpdproftpdMatch1.2.6rc1
OR
proftpdproftpdMatch1.2.6rc2
OR
proftpdproftpdMatch1.2.7
OR
proftpdproftpdMatch1.2.7rc1
OR
proftpdproftpdMatch1.2.7rc2
OR
proftpdproftpdMatch1.2.7rc3
OR
proftpdproftpdMatch1.2.8
OR
proftpdproftpdMatch1.2.8rc1
OR
proftpdproftpdMatch1.2.8rc2
OR
proftpdproftpdMatch1.2.9
OR
proftpdproftpdMatch1.2.9rc1
OR
proftpdproftpdMatch1.2.9rc2
OR
proftpdproftpdMatch1.2.9rc3
OR
proftpdproftpdMatch1.2.10
OR
proftpdproftpdMatch1.2.10rc1
OR
proftpdproftpdMatch1.2.10rc2
OR
proftpdproftpdMatch1.2.10rc3
OR
proftpdproftpdMatch1.3.0
OR
proftpdproftpdMatch1.3.0a
OR
proftpdproftpdMatch1.3.0rc1
OR
proftpdproftpdMatch1.3.0rc2
OR
proftpdproftpdMatch1.3.0rc3
OR
proftpdproftpdMatch1.3.0rc4
OR
proftpdproftpdMatch1.3.0rc5
OR
proftpdproftpdMatch1.3.1
OR
proftpdproftpdMatch1.3.1rc1
OR
proftpdproftpdMatch1.3.1rc2
OR
proftpdproftpdMatch1.3.1rc3
OR
proftpdproftpdMatch1.3.2rc1

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.0%