ADI Convergence Galaxy FTP Server Password Remote Denial of Service Vulnerability

Bugtraq ID:	28066
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 01 2008 12:00AM
Updated:	Mar 03 2008 04:32PM
Credit:	0in is credited with the discovery of this vulnerability.
Vulnerable:	Neostrada TP Livebox router 0 ADI Convergence Galaxy FTP Server 0.1
Not Vulnerable:

ADI Convergence Galaxy FTP Server Password Remote Denial of Service Vulnerability

ADI Convergence Galaxy FTP Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, remote code execution may also be possible, but this has not been confirmed.

ADI Convergence Galaxy FTP Server 0.1 is vulnerable; other versions may also be affected.

ADI Convergence Galaxy FTP Server Password Remote Denial of Service Vulnerability

The following proof-of-concept exploits are available:

• /data/vulnerabilities/exploits/28066.c

ADI Convergence Galaxy FTP Server Password Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ADI Convergence Galaxy FTP Server Password Remote Denial of Service Vulnerability

References:

• Livebox Router vulnerability to REMOTE BUFFER OVERFLOW DoS (FTPD)_ ([email protected])