FTPDMIN List Command Remote Denial of Service Vulnerability

Bugtraq ID:	23049
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Mar 20 2007 12:00AM
Updated:	Mar 21 2011 04:16PM
Credit:	shinnai is credited with the discovery of this vulnerability.
Vulnerable:	Matthias Wandel FTPDMIN 0.96
Not Vulnerable:

FTPDMIN List Command Remote Denial of Service Vulnerability

FTPDMIN is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions.

Successfully exploiting this issue would cause the affected application to crash, denying service to legitimate users.

This issue affects version 0.96; other versions may also be affected.

FTPDMIN List Command Remote Denial of Service Vulnerability

Attackers can exploit this issue by using readily available network tools and/or FTP clients.

The following exploits are available:

• /data/vulnerabilities/exploits/23049.pl
• /data/vulnerabilities/exploits/23049.rb

FTPDMIN List Command Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FTPDMIN List Command Remote Denial of Service Vulnerability

References:

• FTPDMIN Homepage (Matthias Wandel)