RhinoSoft Serv-U FTP Server Unspecified Denial of Service Vulnerability

Bugtraq ID:	15273
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 02 2005 12:00AM
Updated:	Nov 02 2005 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	Rhino Software Serv-U 6.1 .0.1 Rhino Software Serv-U 6.1 .0.0 Rhino Software Serv-U 6.0 .0.2 Rhino Software Serv-U 6.0 .0.1 Rhino Software Serv-U 6.0 Rhino Software Serv-U 5.2 .0.1 Rhino Software Serv-U 5.2 .0.0 Rhino Software Serv-U 5.1 .0 Rhino Software Serv-U 5.0 .0.9 Rhino Software Serv-U 5.0 .0.6 Rhino Software Serv-U 5.0 .0.4 Rhino Software Serv-U 4.2 Rhino Software Serv-U 4.1 .0.11 Rhino Software Serv-U 4.1 Rhino Software Serv-U 4.0 .0.4 Rhino Software Serv-U 3.1 Rhino Software Serv-U 3.0 Rhino Software Serv-U 2.5
Not Vulnerable:	Rhino Software Serv-U 6.1 .0.4

RhinoSoft Serv-U FTP Server Unspecified Denial of Service Vulnerability

Serv-U FTP server is prone to an unspecified denial of service vulnerability. This issue is most likely due to a failure in the application to handle exceptional conditions.

Specific details regarding this issue are not currently available, this BID will be updated as more information becomes available.

An attacker can exploit this vulnerability to cause the server to crash, effectively denying service to legitimate users.

RhinoSoft Serv-U FTP Server Unspecified Denial of Service Vulnerability

No exploit is required.

RhinoSoft Serv-U FTP Server Unspecified Denial of Service Vulnerability

Solution:
The vendor has addressed this issue in Serv-U FTP Server version 6.1.0.4. Users are advised to contact the vendor for information on obtaining an updated version.

RhinoSoft Serv-U FTP Server Unspecified Denial of Service Vulnerability

References:

• Serv-U Homepage (RhinoSoft)
  
• Serv-U Release Notes (RhinoSoft)