Wing FTP Server 'PORT' Command Denial Of Service Vulnerability

Bugtraq ID:	41015
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 18 2010 12:00AM
Updated:	Jun 22 2010 10:38PM
Credit:	Sumit Kumar Soni , Trend Micro
Vulnerable:	wftpserver Wing FTP Server 3.1.2 wftpserver Wing FTP Server 3.1 wftpserver Wing FTP Server 3.0 wftpserver Wing FTP Server 2.4
Not Vulnerable:	wftpserver Wing FTP Server 3.2

Wing FTP Server 'PORT' Command Denial Of Service Vulnerability

Wing FTP Server is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the server to crash, resulting in a denial-of-service condition. Other attacks may also be possible.

This issue is known to be exploitable in Windows environment; other platforms may also be affected.

Wing FTP Server 3.1.2 is vulnerable; prior versions may also be affected.

Wing FTP Server 'PORT' Command Denial Of Service Vulnerability

An attacker can use readily available network tools to exploit these issues.

Wing FTP Server 'PORT' Command Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more details.

Wing FTP Server 'PORT' Command Denial Of Service Vulnerability

References:

• Wing FTP Server Homepage (Wing FTP Server)
  
• Wing FTP Server Release Notes (Wing FTP Server)
  
• Wing FTP Server PORT Command DoS Vulnerability (sk)
  
• Trend Micro Discovers Wing FTP Server PORT Command DoS Bug Read more: http://bl (Trend Micro)