Cooolsoft PowerFTP Server Multiple Denial Of Service Vulnerability
BID:3595
Info
Cooolsoft PowerFTP Server Multiple Denial Of Service Vulnerability
| Bugtraq ID: | 3595 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2001-0932 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 29 2001 12:00AM |
| Updated: | Jul 11 2009 09:06AM |
| Credit: | Discovered and posted to Bugtraq by Alex Hernandez <[email protected]>. |
| Vulnerable: |
Cooolsoft PowerFTP 2.10 Cooolsoft PowerFTP 2.0 3 |
| Not Vulnerable: | |
Discussion
Cooolsoft PowerFTP Server Multiple Denial Of Service Vulnerability
PowerFTP is a commercial FTP server for Microsoft Windows 9x/ME/NT/2000/XP operating systems. It is maintained by Cooolsoft.
Multiple instances of denial of service vulnerabilities exist in PowerFTP's FTP daemon. This is achieved by connecting to a vulnerable host and submitting an unusally long string of arbitrary characters.
It has been reported that this issue may also be triggered by issuing an excessively long FTP command of 2050 bytes or more.
This issue may is most likely due to a buffer overflow. If this is the case, there is a possibility that arbitrary code may be executed on the vulnerable host. However, this has not yet been confirmed.
PowerFTP is a commercial FTP server for Microsoft Windows 9x/ME/NT/2000/XP operating systems. It is maintained by Cooolsoft.
Multiple instances of denial of service vulnerabilities exist in PowerFTP's FTP daemon. This is achieved by connecting to a vulnerable host and submitting an unusally long string of arbitrary characters.
It has been reported that this issue may also be triggered by issuing an excessively long FTP command of 2050 bytes or more.
This issue may is most likely due to a buffer overflow. If this is the case, there is a possibility that arbitrary code may be executed on the vulnerable host. However, this has not yet been confirmed.
Exploit / POC
Cooolsoft PowerFTP Server Multiple Denial Of Service Vulnerability
al3x hernandez <[email protected]> has provided the following exploits:
al3x hernandez <[email protected]> has provided the following exploits:
Solution / Fix
Cooolsoft PowerFTP Server Multiple Denial Of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.