← Back

CVE-2008-2375

nvd nist
Published: Jul 9, 2008Modified: Apr 23, 2026

JSON object

Loading...
7.1
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:C
Exploitability: 8.6 / Impact: 6.9
Source: NVD

Description

Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remote attackers to cause a denial of service (memory consumption) via a large number of invalid authentication attempts within the same session, a different vulnerability than CVE-2007-5962.

Affected (31)

Products: Redhat: Vsftpd
Redhat
1 product
Vsftpd
Configuration A
31 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Redhat
Vsftpd
Version 0.0.10
Vsftpd
Version 0.0.11
Vsftpd
Version 0.0.12
Vsftpd
Version 0.0.13
Vsftpd
Version 0.0.14
Vsftpd
Version 0.0.15
Vsftpd
Version 0.0.1
Vsftpd
Version 0.0.2
Vsftpd
Version 0.0.3
Vsftpd
Version 0.0.4
Vsftpd
Version 0.0.5
Vsftpd
Version 0.0.6
Vsftpd
Version 0.0.7
Vsftpd
Version 0.0.8
Vsftpd
Version 0.0.9
Vsftpd
Version 0.9.0
Vsftpd
Version 0.9.1
Vsftpd
Version 0.9.2
Vsftpd
Version 0.9.3
Vsftpd
Version 1.1.0
Vsftpd
Version 1.1.1
Vsftpd
Version 1.1.2
Vsftpd
Version 1.1.3
Vsftpd
Version 1.2.0
Vsftpd
Version 1.2.1
Vsftpd
Version 1.2.2
Vsftpd
Version 2.0.0
Vsftpd
Version 2.0.1
Vsftpd
Version 2.0.2
Vsftpd
Version 2.0.3
Vsftpd
Version 2.0.4
Running on/withPlatform Versions
Redhat
Enterprise Linux
Version 3.0
Redhat
Enterprise Linux
Version 4.0

Related CWEs

CWE-399
CWE-399

References (30)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Exploit
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.