glFTPD LIST Denial of Service Vulnerability

Bugtraq ID:	3201
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 17 2001 12:00AM
Updated:	Aug 17 2001 12:00AM
Credit:	Reported to Bugtraq by "Jan Wagner" <[email protected]> on August 17, 2001.
Vulnerable:	GlFtpd GlFtpd 1.23 GlFtpd GlFtpd 1.22 b GlFtpd GlFtpd 1.21 GlFtpd GlFtpd 1.20 GlFtpd GlFtpd 1.19 GlFtpd GlFtpd 1.18 a GlFtpd GlFtpd 1.17.2 GlFtpd GlFtpd 1.16.9 GlFtpd GlFtpd 1.13.6
Not Vulnerable:	GlFtpd GlFtpd 1.24

glFTPD LIST Denial of Service Vulnerability

glFtpD contains an input validation error that may allow a malicious user to cause a denial of service against a host running the daemon.

The problem occurs when a specially crafted 'LIST' command is received by the server. If the argument to the command contains an excessive number of '*' characters, the server will cease to respond and consume all available CPU resources on the system.

If the attack is successful, the server will need to be manually restarted to regain normal functionality.

glFTPD LIST Denial of Service Vulnerability

The following exploit is due to "Jan Wagner" <[email protected]>:

• /data/vulnerabilities/exploits/gl123DOS.pl

glFTPD LIST Denial of Service Vulnerability

Solution:
This issue has been rectified in version 1.24 of glFtpD:


GlFtpd GlFtpd 1.23

• glFtpD glFtpD 1.24
  http://www.glftpd.org/glftpd.html

glFTPD LIST Denial of Service Vulnerability

References:

• glFtpD Homepage (glFtpD)