HP Tru64 FTP Server Remote Denial Of Service Vulnerability

Bugtraq ID:	14886
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 20 2005 12:00AM
Updated:	Sep 20 2005 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	HP Tru64 5.1 B-3 HP Tru64 5.1 B-2 PK4 HP Tru64 5.1 A PK HP Tru64 4.0 G PK4 HP Tru64 4.0 F PK8
Not Vulnerable:

HP Tru64 FTP Server Remote Denial Of Service Vulnerability

A remote denial of service vulnerability has been reported in the HP Tru64 FTP server implementation. A remote authenticated FTP user may cause the FTP server process to become unresponsive. This may likely also be exploited over anonymous FTP, if enabled.

The precise technical details of this vulnerability are currently unknown. This BID will be updated as further information becomes available.

HP Tru64 FTP Server Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP Tru64 FTP Server Remote Denial Of Service Vulnerability

Solution:
HP has released advisory SSRT5971 to address this issue. Please see the referenced advisory for further information.

HP Tru64 FTP Server Remote Denial Of Service Vulnerability

References:

• HP Tru64 Home Page (HP)
  
• SSRT5971 rev.0 - HP Tru64 Unix FTP Daemon (ftpd) Remote Denial of Service (DoS) (HP)