TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote Denial of Service Vulnerability

Bugtraq ID:	37114
Class:	Design Error
CVE:	CVE-2009-4105
Remote:	Yes
Local:	No
Published:	Nov 24 2009 12:00AM
Updated:	Apr 13 2015 08:04PM
Credit:	leinakesi[at]gmail.com
Vulnerable:	TYPSoft TYPSoft FTP Server 1.10 TYPSoft TYPSoft FTP Server 1.1 TYPSoft TYPSoft FTP Server 1.0 9 TYPSoft TYPSoft FTP Server 1.0 8 TYPSoft TYPSoft FTP Server 1.0 7 TYPSoft TYPSoft FTP Server 1.0 6 TYPSoft TYPSoft FTP Server 1.0 5 TYPSoft TYPSoft FTP Server 1.0 4 TYPSoft TYPSoft FTP Server 1.0 3 TYPSoft TYPSoft FTP Server 1.0 2 TYPSoft TYPSoft FTP Server 1.0 1 TYPSoft TYPSoft FTP Server 1.0 0 TYPSoft TYPSoft FTP Server 0.99.6 TYPSoft TYPSoft FTP Server 0.97.5 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 TYPSoft TYPSoft FTP Server 0.97 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 TYPSoft TYPSoft FTP Server 0.96 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 TYPSoft TYPSoft FTP Server 0.95 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 TYPSoft TYPSoft FTP Server 0.93 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 TYPSoft TYPSoft FTP Server 0.85 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0
Not Vulnerable:

TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote Denial of Service Vulnerability

TYPSoft FTP Server is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to crash affected FTP servers, denying service to legitimate users.

TYPSoft FTP Server 1.10 is vulnerable; other versions may also be affected.

TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote Denial of Service Vulnerability

The following exploit codes are available:

• /data/vulnerabilities/exploits/37114.py
• /data/vulnerabilities/exploits/37114-1.py

TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote Denial of Service Vulnerability

References:

• TYPSoft FTP Server Homepage (TYPSoft)
  
• TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote DoS Vulnerabilities ([email protected])