Pablo Software Solutions Quick 'n Easy FTP Server User Command Denial of Service Vulnerability

Bugtraq ID:	14451
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-2479
Remote:	Yes
Local:	No
Published:	Aug 02 2005 12:00AM
Updated:	Feb 28 2011 05:28PM
Credit:	Credit for the discovery of this vulnerability goes to matiteman.
Vulnerable:	Pablo Software Solutions Quick And Easy FTP Server 3.0 Pablo Software Solutions Quick And Easy FTP Server 3.2
Not Vulnerable:

Pablo Software Solutions Quick 'n Easy FTP Server User Command Denial of Service Vulnerability

Quick 'n Easy FTP Server is prone to a remotely exploitable denial-of-service vulnerability. Attackers may trigger this through an overly long argument for the USER command.

Successful exploiting this issue may allow attackers to exhaust system resources and crash the server.

Pablo Software Solutions Quick 'n Easy FTP Server User Command Denial of Service Vulnerability

A proof-of-concept exploit has been provided by matiteman.

It has been reported that the values in the proof of concept are incorrect. The correct overflow values should be:

print $socket "user " . "A" x 10240 . "\r\n";

print $socket "user " . "A" x 21048 . "\r\n";

The following exploit code is available:

• /data/vulnerabilities/exploits/14451.py

Pablo Software Solutions Quick 'n Easy FTP Server User Command Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Pablo Software Solutions Quick 'n Easy FTP Server User Command Denial of Service Vulnerability

References:

• Quick 'n Easy FTP Server Homepage (Pablo Software Solutions)
  
• Quick 'n Easy FTP Server 3.0 pro / lite (buffer overflow vulnerabilities) ([email protected], "[at]"@securityfocus.com, hotmail.com@securityfocus)
  
• Re: Quick 'n Easy FTP Server 3.0 pro / lite (buffer overflow vulnerabilities) ([email protected])