Description
Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service (daemon crash) via multiple OPEN commands to the FTP proxy.
References
- 26180 vdb-entry
- 41870 vdb-entry
- GLSA-200711-13 vendor-advisory
- 20071023 3proxy 0.5.3j released (bugfix) mailing-list
- 20071023 3proxy double free vulnerability mailing-list
- http://3proxy.ru/0.5.3j/Changelog.txt
- http://bugs.gentoo.org/show_bug.cgi?id=196772
- 3proxy-ftpprchild-dos(37401) vdb-entry
- 27353 third-party-advisory
- 27607 third-party-advisory