Cerberus FTP Server 'PASV' Denial of Service Vulnerability
BID:2976
Info
Cerberus FTP Server 'PASV' Denial of Service Vulnerability
| Bugtraq ID: | 2976 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2001-0827 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 04 2001 12:00AM |
| Updated: | Jul 11 2009 06:56AM |
| Credit: | Discovered and posted to Bugtraq by Wizdumb <[email protected]> on July 4, 2001. |
| Vulnerable: |
Grant Averett Ceberus FTP Server 1.22 Grant Averett Ceberus FTP Server 1.5 Grant Averett Ceberus FTP Server 1.3 Grant Averett Ceberus FTP Server 1.2 Grant Averett Ceberus FTP Server 1.1 Grant Averett Ceberus FTP Server 1.0 1 Grant Averett Ceberus FTP Server 1.0 |
| Not Vulnerable: | |
Discussion
Cerberus FTP Server 'PASV' Denial of Service Vulnerability
Cerberus FTP Server is a free, multi-threaded file transfer utility for Microsoft Windows systems.
There is an exploitable denial of service vulnerability in Cerberus FTP server. It is possible to cause the server to crash by sending a large number of 'PASV' requests. In the event that the affected service crashes, it will have to be restarted in order to regain normal functionality.
Cerberus FTP Server is a free, multi-threaded file transfer utility for Microsoft Windows systems.
There is an exploitable denial of service vulnerability in Cerberus FTP server. It is possible to cause the server to crash by sending a large number of 'PASV' requests. In the event that the affected service crashes, it will have to be restarted in order to regain normal functionality.
Exploit / POC
Cerberus FTP Server 'PASV' Denial of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Cerberus FTP Server 'PASV' Denial of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.