Sami FTP Server Multiple Commands Remote Denial Of Service Vulnerabilities
BID:27817
Info
Sami FTP Server Multiple Commands Remote Denial Of Service Vulnerabilities
| Bugtraq ID: | 27817 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2008-5106 CVE-2008-5105 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2008 12:00AM |
| Updated: | Jul 06 2016 02:17PM |
| Credit: | securfrog is credited with the discovery of this vulnerability. |
| Vulnerable: |
KarjaSoft Sami FTP Server 2.0.2 KarjaSoft Sami FTP Server 2.0.1 |
| Not Vulnerable: | |
Discussion
Sami FTP Server Multiple Commands Remote Denial Of Service Vulnerabilities
Sami FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions.
An attacker can exploit these issues to crash the affected application, denying service to legitimate users.
Versions in the Sami FTP Server 2.0 series are vulnerable; other versions may also be affected.
Sami FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions.
An attacker can exploit these issues to crash the affected application, denying service to legitimate users.
Versions in the Sami FTP Server 2.0 series are vulnerable; other versions may also be affected.
Exploit / POC
Sami FTP Server Multiple Commands Remote Denial Of Service Vulnerabilities
An attacker can use standard FTP clients or network utilities to exploit these issues.
Issuing one of the affected commands followed by 'AA' will trigger a denial of service.
The following exploit is available:
An attacker can use standard FTP clients or network utilities to exploit these issues.
Issuing one of the affected commands followed by 'AA' will trigger a denial of service.
The following exploit is available:
Solution / Fix
Sami FTP Server Multiple Commands Remote Denial Of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Sami FTP Server Multiple Commands Remote Denial Of Service Vulnerabilities
References:
References: