CVE-2007-0247

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.

• CWE-399

• http://fedoranews.org/cms/node/2442
• http://osvdb.org/39839
• http://secunia.com/advisories/23767Vendor Advisory
• http://secunia.com/advisories/23805Vendor Advisory
• http://secunia.com/advisories/23810Vendor Advisory
• http://secunia.com/advisories/23837Vendor Advisory
• http://secunia.com/advisories/23889Vendor Advisory
• http://secunia.com/advisories/23921Vendor Advisory
• http://secunia.com/advisories/23946Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:026
• http://www.novell.com/linux/security/advisories/2007_12_squid.html
• http://www.securityfocus.com/bid/22079
• http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12
• http://www.squid-cache.org/bugs/show_bug.cgi?id=1857
• http://www.trustix.org/errata/2007/0003/
• http://www.ubuntu.com/usn/usn-414-1
• http://www.vupen.com/english/advisories/2007/0199Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31523
• http://fedoranews.org/cms/node/2442
• http://osvdb.org/39839
• http://secunia.com/advisories/23767Vendor Advisory
• http://secunia.com/advisories/23805Vendor Advisory
• http://secunia.com/advisories/23810Vendor Advisory
• http://secunia.com/advisories/23837Vendor Advisory
• http://secunia.com/advisories/23889Vendor Advisory
• http://secunia.com/advisories/23921Vendor Advisory
• http://secunia.com/advisories/23946Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:026
• http://www.novell.com/linux/security/advisories/2007_12_squid.html
• http://www.securityfocus.com/bid/22079
• http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12
• http://www.squid-cache.org/bugs/show_bug.cgi?id=1857
• http://www.trustix.org/errata/2007/0003/
• http://www.ubuntu.com/usn/usn-414-1
• http://www.vupen.com/english/advisories/2007/0199Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31523

Published

Jan 16, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0240Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and …
• CVE-2007-0242The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.…
• CVE-2007-0243Buffer overflow in Sun JDK and Java Runtime Environment (JRE…
• CVE-2007-0244pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) …
• CVE-2007-0245Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and…
• CVE-2007-0246plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.…
• CVE-2007-0248The aclMatchExternal function in Squid before 2.6.STABLE7 al…
• CVE-2007-0249Cross-site scripting (XSS) vulnerability in index.php in Nwo…
• CVE-2007-0250index.php in Nwom topsites 3.0 allows remote attackers to ob…
• CVE-2007-0251Integer underflow in the DecodeGRE function in src/decode.c …
• CVE-2007-0252Unspecified vulnerability in easy-content filemanager allows…
• CVE-2007-0253Unspecified vulnerability in the grsecurity patch has unspec…