Personal FTP Server 'RETR' Command Remote Denial of Service Vulnerability

Bugtraq ID:	31173
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-4136
Remote:	Yes
Local:	No
Published:	Sep 14 2008 12:00AM
Updated:	May 07 2015 05:23PM
Credit:	Shinnok raydenxy
Vulnerable:	Michael Roth Software Personal FTP Server 6.0f
Not Vulnerable:

Personal FTP Server 'RETR' Command Remote Denial of Service Vulnerability

Personal FTP Server is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions.

Successfully exploiting this issue would cause the affected application to crash, denying service to legitimate users.

Personal FTP Server 6.0f is vulnerable; other versions may also be affected.

Personal FTP Server 'RETR' Command Remote Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/31173.c

Personal FTP Server 'RETR' Command Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Personal FTP Server 'RETR' Command Remote Denial of Service Vulnerability

References:

• Michael Roth Software Homepage (Michael Roth Software)