Dream FTP Server Remote Denial of Service Vulnerability

Bugtraq ID:	21700
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 21 2006 12:00AM
Updated:	Dec 21 2006 12:00AM
Credit:	InTeL is credited with the discovery of this vulnerability.
Vulnerable:	BolinTech Dream FTP Server 1.0.2
Not Vulnerable:

Dream FTP Server Remote Denial of Service Vulnerability

Dream FTP Server is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users. It is not known at this time if this issue can be exploited to execute arbitrary code; this BID will be updated as further information becomes available.

This issue affects version 1.0.2; other versions may also be vulnerable.

Dream FTP Server Remote Denial of Service Vulnerability

An attacker can exploit these issues through an FTP client.

The following proof-of-concept exploit is available:

• /data/vulnerabilities/exploits/21700.c

Dream FTP Server Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any solutions for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Dream FTP Server Remote Denial of Service Vulnerability

References:

• Dream FTP Server Homepage (BolinTech)