WhitSoft Development SlimFTPd Remote Denial of Service Vulnerability

Bugtraq ID:	14723
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 02 2005 12:00AM
Updated:	Sep 02 2005 12:00AM
Credit:	This vulnerability was discovered by Critical Security <http://www.critical.lt>.
Vulnerable:	WhitSoft SlimFTPd 3.17
Not Vulnerable:

WhitSoft Development SlimFTPd Remote Denial of Service Vulnerability

SlimFTPd is prone to a remote denial of service vulnerability. This issue is due to a failure in the application to handle exceptional conditions.

The problem presents itself during login. The application fails to handle malicious input in a proper manner resulting in a crash of the server, thus denying service to legitimate users.

WhitSoft Development SlimFTPd Remote Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/SlimFTPd-RemoteDoS.c

WhitSoft Development SlimFTPd Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

WhitSoft Development SlimFTPd Remote Denial of Service Vulnerability

References:

• Slim FTPd 3.17 Remote DoS (Critical Security)
  
• SlimFTPd Home Page (WhitSoft Development)
  
• WhitSoft Homepage (WhitSoft Development)