VicFTPS 'LIST' Command Remote Denial of Service Vulnerability

Bugtraq ID:	28967
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-2031 CVE-2008-6829
Remote:	Yes
Local:	No
Published:	Apr 28 2008 12:00AM
Updated:	Jul 05 2016 10:01PM
Credit:	Neelima Premsankar
Vulnerable:	VicFTPS VicFTPS 5.0
Not Vulnerable:

VicFTPS 'LIST' Command Remote Denial of Service Vulnerability

VicFTPS is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions.

Successfully exploiting this issue would cause the affected application to crash, denying service to legitimate users. This issue may possibly also allow remote code-execution, but this has not been confirmed.

VicFTPS 'LIST' Command Remote Denial of Service Vulnerability

Attackers can exploit this issue by using readily available network utilities.

The following exploit is available:

• /data/vulnerabilities/exploits/28967.c

VicFTPS 'LIST' Command Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VicFTPS 'LIST' Command Remote Denial of Service Vulnerability

References:

• VicFTPS Homepage (VicFTPS)