War FTP Daemon CWD Command Remote Denial Of Service Vulnerability

Bugtraq ID:	20973
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 08 2006 12:00AM
Updated:	Nov 13 2006 09:57PM
Credit:	Joxean Koret is credited with the discovery of this vulnerability.
Vulnerable:	War FTP Daemon War FTP Daemon 1.82 RC11
Not Vulnerable:

War FTP Daemon CWD Command Remote Denial Of Service Vulnerability

War FTP Daemon is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

War FTP Daemon 1.82.00-RC11 is reported vulnerable to this issue; other versions may also be affected.

This issue may be related to the issue described in BID 12384 (War FTP Daemon Remote Denial Of Service Vulnerability).

War FTP Daemon CWD Command Remote Denial Of Service Vulnerability

An attacker can use standard FTP clients or network utilities to exploit this issue.

War FTP Daemon CWD Command Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

War FTP Daemon CWD Command Remote Denial Of Service Vulnerability

References:

• Vendor Homepage (War FTP Daemon)