CVE-2007-0247

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-16 · updated 2026-06-16
Weakness: CWE-399

Description

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.

Affected products

Squid: 2.6.stable1, 2.6.stable2, 2.6.stable3, 2.6.stable4, 2.6.stable5, 2.6.stable6

References

http://fedoranews.org/cms/node/2442
http://osvdb.org/39839
http://secunia.com/advisories/23767
http://secunia.com/advisories/23805
http://secunia.com/advisories/23810
http://secunia.com/advisories/23837
http://secunia.com/advisories/23889
http://secunia.com/advisories/23921
http://secunia.com/advisories/23946
http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:026
http://www.novell.com/linux/security/advisories/2007_12_squid.html

Get alerted when CVE-2007-0247 or the next vulnerability affects your stack