CVE-2007-5962: Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fe...

Security readout for executives and security teams

This is a remote denial-of-service issue in certain Red Hat-patched vsftpd 2.0.5 builds. An attacker could make the FTP service consume memory and become unavailable. The business risk is service disruption, mainly for legacy internet-facing FTP systems using the affected distro packages. Exposure is most likely on old Linux systems still running the affected patched vsftpd 2.0.5 packages and accepting remote FTP connections. Systems not using these specific downstream packages are not established as affected by the provided sources. Treat this as a legacy exposure cleanup item unless a vulnerable FTP service is internet-facing or business-critical. Prioritize patching or retirement for exposed systems because exploitation can disrupt service without authentication being stated in the bundle. Mitigation focus: Identify any vsftpd 2.0.5 deployments on RHEL 5, Fedora 6-8, Foresight, or rPath.; Apply the relevant vendor advisory updates from Red Hat, Fedora, rPath, or downstream appliance vendors.; Restrict FTP exposure to trusted networks where immediate patching is not possible..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.