Crob FTP Server Multiple Commands Remote Denial of Service Vulnerability

Bugtraq ID:	22058
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 15 2007 12:00AM
Updated:	Jan 16 2007 06:00PM
Credit:	shinnai is credited with the discovery of this vulnerability.
Vulnerable:	Crob Crob FTP Server 3.6.1 b.263
Not Vulnerable:

Crob FTP Server Multiple Commands Remote Denial of Service Vulnerability

Crob FTP Server is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users.

Version 3.6.1 b.263 is vulnerable; other versions may also be affected.

Crob FTP Server Multiple Commands Remote Denial of Service Vulnerability

Attackers may exploit this issue using an FTP client application.

A sample exploit has been provided:

• /data/vulnerabilities/exploits/22058.py

Crob FTP Server Multiple Commands Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any solutions for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Crob FTP Server Multiple Commands Remote Denial of Service Vulnerability

References:

• Crob FTP Server Web Site (Crob)