SGI IRIX ftpd Multiple Denial Of Service Vulnerabilities

Bugtraq ID:	10037
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 02 2004 12:00AM
Updated:	Apr 02 2004 12:00AM
Credit:	This issue was disclosed in the referenced vendor advisory.
Vulnerable:	SGI IRIX 6.5.23 SGI IRIX 6.5.22 SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.21 SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.20
Not Vulnerable:

SGI IRIX ftpd Multiple Denial Of Service Vulnerabilities

The FTP server included with SGI IRIX is vulnerable to multiple denial of service vulnerabilities.

The first issue is reported to affect the IRIX ftpd process when links between Microsoft Windows 2000 are made. The second issue affects the ftpd process with certain mode configurations.

These issues may allow a malicious user to cause the affected server process to hang or crash, effectively denying service to legitimate users.

SGI IRIX ftpd Multiple Denial Of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SGI IRIX ftpd Multiple Denial Of Service Vulnerabilities

Solution:
The vendor has provided a patch dealing with these issues. Please see the referenced advisory for more information and details on obtaining fixes.

SGI IRIX ftpd Multiple Denial Of Service Vulnerabilities

References: