XM Easy Personal FTP Server Remote Denial of Service Vulnerability
BID:18632
Info
XM Easy Personal FTP Server Remote Denial of Service Vulnerability
| Bugtraq ID: | 18632 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 24 2006 12:00AM |
| Updated: | Jan 02 2007 04:36PM |
| Credit: | Jerome Athias and Parveen Vashishtha are credited with the discovery of this vulnerability. |
| Vulnerable: |
dxmsoft XM Easy Personal FTP Server 5.2.1 dxmsoft XM Easy Personal FTP Server 5.0.1 |
| Not Vulnerable: | |
Discussion
XM Easy Personal FTP Server Remote Denial of Service Vulnerability
XM Easy Personal FTP Server is prone to a remote denial-of-service vulnerability because it fails to properly handle user-supplied input.
This issue allows remote attackers to crash affected FTP servers, denying service to legitimate users. Attackers may potentially exploit this issue to execute arbitrary machine code in the context of affected servers, but this has not been confirmed.
XM Easy Personal FTP Server version 5.0.1 is vulnerable to this issue; other versions may also be affected.
XM Easy Personal FTP Server is prone to a remote denial-of-service vulnerability because it fails to properly handle user-supplied input.
This issue allows remote attackers to crash affected FTP servers, denying service to legitimate users. Attackers may potentially exploit this issue to execute arbitrary machine code in the context of affected servers, but this has not been confirmed.
XM Easy Personal FTP Server version 5.0.1 is vulnerable to this issue; other versions may also be affected.
Exploit / POC
XM Easy Personal FTP Server Remote Denial of Service Vulnerability
Attackers may use readily available network utilities to exploit this issue.
The following exploit script is available to demonstrate crashing the affected application:
Attackers may use readily available network utilities to exploit this issue.
The following exploit script is available to demonstrate crashing the affected application:
Solution / Fix
XM Easy Personal FTP Server Remote Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
XM Easy Personal FTP Server Remote Denial of Service Vulnerability
References:
References:
- XM Easy Personal FTP Server Home Page (dxmsoft)