Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of serv

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• 3proxy 3proxy0.5
• 3proxy 3proxy0.5.1
• 3proxy 3proxy0.5.2
• 3proxy 3proxy0.5.3g
• 3proxy 3proxy0.5.3h
• 3proxy 3proxy0.5.3i

Other highest-scoring records for the same primary product.

• CVE-2007-2031Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to execute
  45Plan
• CVE-2019-14495webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.
  40Plan
• CVE-2006-69813proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a denial of service (blocked account) via un
  20Monitor
• CVE-2006-69823proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC26
  20Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.