Teamtek Universal FTP Server CWD, LIST, and PORT Commands Remote Denial Of Service Vulnerabilities

Bugtraq ID:	27804
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-5431
Remote:	Yes
Local:	No
Published:	Feb 14 2008 12:00AM
Updated:	Dec 12 2008 08:41PM
Credit:	securfrog is credited with the discovery of this vulnerability.
Vulnerable:	Teamtek Unversical FTP Server 1.0.44
Not Vulnerable:

Teamtek Universal FTP Server CWD, LIST, and PORT Commands Remote Denial Of Service Vulnerabilities

Universal FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions.

An attacker can exploit these issues to crash the affected application, denying service to legitimate users.

Universal FTP Server 1.0.44 is vulnerable; other versions may also be affected.

Teamtek Universal FTP Server CWD, LIST, and PORT Commands Remote Denial Of Service Vulnerabilities

An attacker can use standard FTP clients or network utilities to exploit these issues.

Teamtek Universal FTP Server CWD, LIST, and PORT Commands Remote Denial Of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Teamtek Universal FTP Server CWD, LIST, and PORT Commands Remote Denial Of Service Vulnerabilities

References:

• Vendor Home Page (Teamtek)
  
• Re: UniversalFtp Server 1.0.44 Multiple Remote Denial of service ([email protected] )
  
• UniversalFtp Server 1.0.44 Multiple Remote Denial of service ([email protected] )