CVE-2010-4816

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.9 through 8.0 OpenBSD version 4.6

Description A null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service. The issue is related to an uncontrolled resource consumption in the ftpd component. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For FreeBSD versions 4.9 through 8.0, consider disabling the ftpd service until a patch is available. For OpenBSD version 4.6, restrict access to the ftpd service to minimize the risk of exploitation. As a temporary workaround, consider disabling the ftpd/popen.c component until a patch is available.