CVE-2007-0247

Description

From CVE.org

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.

Statement

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

This issue did not affect the versions of squid as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.

Frequently Asked Questions

Want to get errata notifications? Sign up here.