Vsftpd Listener Denial of Service Vulnerability

Bugtraq ID:	10394
Class:	Race Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 21 2004 12:00AM
Updated:	May 21 2004 12:00AM
Credit:	Olivier Baudron <[email protected]> reported the issue to the vendor.
Vulnerable:	Vsftpd Vsftpd 1.2.1
Not Vulnerable:	Vsftpd Vsftpd 1.2.2

Vsftpd Listener Denial of Service Vulnerability

According to the vendor, vsftpd is prone to a denial of service condition in the connection handling code. Vsftpd's listener process can become unstable under extreme loads, denying service to legitimate users.

The issue apparently arises from reentering malloc and free, possibly corrupting memory. Vsftpd calls non-reentrant functions inappropriately, thus leading to a denial of service vulnerability.

Vsftpd Listener Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Vsftpd Listener Denial of Service Vulnerability

Solution:
The vendor has released a new version of the application addressing this issue.


Vsftpd Vsftpd 1.2.1

• Vsftpd vsftpd-1.2.2.tar.gz
  ftp://vsftpd.beasts.org/users/cevans/vsftpd-1.2.2.tar.gz

Vsftpd Listener Denial of Service Vulnerability

References:

• Vsftpd Homepage (Vsftpd)