Hummingbird Connectivity FTP Server Denial Of Service Vulnerability

Bugtraq ID:	11542
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 26 2004 12:00AM
Updated:	Oct 26 2004 12:00AM
Credit:	CESG Network Defence Team disclosed this vulnerability.
Vulnerable:	Hummingbird Connectivity 9.0 Hummingbird Connectivity 7.1
Not Vulnerable:

Hummingbird Connectivity FTP Server Denial Of Service Vulnerability

Hummingbird Connectivity is reported prone to a denial of service vulnerability in its FTP server application.

This vulnerability allows remote attackers to crash the affected application, denying service to legitimate users.

Version 7.1 and 9.0 are reported vulnerable to this issue. Other versions are also likely affected.

Hummingbird Connectivity FTP Server Denial Of Service Vulnerability

An exploit is not required.

Hummingbird Connectivity FTP Server Denial Of Service Vulnerability

Solution:
It is reported that Hummingbird has fixes available for this issue, but it has not been confirmed. Please contact the vendor for further information on obtaining fixes.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hummingbird Connectivity FTP Server Denial Of Service Vulnerability

References:

• Connectivity Home Page (Hummingbird LTD.)
  
• NISCC Vulnerability Advisory 841713/Hummingbird (NISCC)