ID CVE-2007-2179
Summary Multiple unspecified vulnerabilities in IXceedCompression in XceddZipLib (RaidenFTPD.dll) in RaidenFTPD 2.4 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving the (1) CalculateCrc, (2) Compress, and (3) Uncompress functions, which result in a NULL pointer dereference.
References
Vulnerable Configurations
  • cpe:2.3:a:raiden_professional_servers:raidenftpd:2.4.2240:*:*:*:*:*:*:*
    cpe:2.3:a:raiden_professional_servers:raidenftpd:2.4.2240:*:*:*:*:*:*:*
  • cpe:2.3:a:raiden_professional_servers:raidenftpd:2.4.2241:*:*:*:*:*:*:*
    cpe:2.3:a:raiden_professional_servers:raidenftpd:2.4.2241:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 16-10-2018 - 16:42)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 23570
bugtraq 20070419 RaidenFTPd IXceedCompression multiple denial of service vulnerabilities
sreason 2606
xf raidenftpd-multiple-dos(33776)
Last major update 16-10-2018 - 16:42
Published 24-04-2007 - 17:19
Last modified 16-10-2018 - 16:42
Back to Top