CVE-2007-5962: redhat enterprise_linux Resource Management Errors
Vulnerability summary
CVE-2007-5962 is a high (CVSS 7.1) Resource Management Errors vulnerability in redhat enterprise_linux. EPSS estimates a 12.06% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 22-05-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.06%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 12.06% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (securityfocus.com)
Maturity: unknown
vsftpd 2.0.5 - 'CWD' (Authenticated) Remote Memory Consumption
Maturity: poc
vsftpd 2.0.5 - 'deny_file' Option Remote Denial of Service (1)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat4 products
- enterprise_linuxEOL5.0
- fedora6 | 7 | 8
- vsftpd< 0:2.0.5-12.el5
- vsftpd-debuginfo< 0:2.0.5-12.el5
1 vendor · 4 products
References
28 links- wiki.rpath.com/wiki/Advisories:rPSA-2008-0185X Refsource CONFIRM
- www.redhat.com/archives/fedora-package-announce/2008-May/msg00681.htmlVendor AdvisoryX Refsource FEDORA
- www.redhat.com/archives/fedora-package-announce/2008-May/msg00691.htmlVendor AdvisoryX Refsource FEDORA
Show all 28 references
- www.redhat.com/archives/fedora-package-announce/2008-May/msg00699.htmlVendor AdvisoryX Refsource FEDORA
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8850VDB EntrySignatureX Refsource OVAL