CVE-2006-6767: Time-Travellers Oftpd

High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days.

oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV command with an unsupported address family, which triggers an assertion failure.

Affected products

• Time-Travellers Oftpd: before 0.3.7 (fixed in 0.3.7)

Published 2007-01-16. Last modified 2026-06-16.