CVE-2007-5962
Red Hat Enterprise Linux 5 and Fedora 6-8 - Denial of Service via CWD Command Memory Leak
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2007-5962. PoCs published by Praveen Darshanam, Martin Nagy, antogit-sys.
AI-analyzed exploit summary This exploit targets a DoS vulnerability in vsftpd 2.0.5 by sending an infinite loop of CWD commands, causing the server to crash. It requires the 'deny_file' configuration option to be set in vsftpd.conf.
Description
Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.
Exploits (4)
This exploit targets a DoS vulnerability in vsftpd 2.0.5 by sending an infinite loop of CWD commands, causing the server to crash. It requires the 'deny_file' configuration option to be set in vsftpd.conf.
This exploit targets a denial-of-service vulnerability in vsftpd 2.0.5 by sending an infinite loop of CWD commands, causing memory exhaustion and crashing the server. It requires the 'deny_file' configuration option to be set in vsftpd.conf.
This exploit targets a denial-of-service vulnerability in vsftpd by repeatedly sending CWD commands to exhaust memory. The script automates the attack by continuously switching directories, causing the server to crash due to improper memory management.
This repository contains a functional Python exploit for CVE-2007-5962, a Denial-of-Service (DoS) vulnerability in vsftpd 2.0.5. The exploit repeatedly sends CWD commands to consume memory and crash the FTP daemon, requiring valid credentials for authentication.