CVE-2008-2375: Red Hat Vsftpd

High severity, CVSS 7.1. EPSS: 3.7% chance of exploitation in the next 30 days.

Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remote attackers to cause a denial of service (memory consumption) via a large number of invalid authentication attempts within the same session, a different vulnerability than CVE-2007-5962.

Affected products

• Red Hat Vsftpd: version 0.0.1 only; version 0.0.2 only; version 0.0.3 only; version 0.0.4 only; version 0.0.5 only; version 0.0.6 only; …

Published 2008-07-09. Last modified 2026-06-16.