CVE-2006-6767: oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2...

Security readout for executives and security teams

This is an old denial-of-service issue in oftpd. A remote attacker could send certain FTP commands that make the daemon abort, interrupting FTP availability. The sources do not indicate data theft, code execution, or confirmed active exploitation. Exposure is likely limited to environments still running oftpd before 0.3.7, especially legacy FTP services reachable from untrusted networks. The source bundle does not identify broader affected products or packaged versions beyond oftpd. Prioritize remediation if oftpd supports business file transfer or is internet-facing. Otherwise, handle through legacy service cleanup. The business risk is service disruption, not proven compromise, based on the supplied sources. Mitigation focus: Identify any running oftpd services and their versions.; Upgrade oftpd to 0.3.7 or later where available.; If packaged by a distribution, follow the vendor security advisory..

Prepared

Jun 29, 2026, 08:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.