Wing FTP Server HTTP Request Denial Of Service Vulnerability

Bugtraq ID:	42736
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 23 2010 12:00AM
Updated:	Mar 19 2015 09:25AM
Credit:	Reported by the vendor.
Vulnerable:	wftpserver Wing FTP Server 3.6.1 wftpserver Wing FTP Server 3.6 wftpserver Wing FTP Server 3.5 wftpserver Wing FTP Server 3.4.3 wftpserver Wing FTP Server 3.4.1 wftpserver Wing FTP Server 3.4 wftpserver Wing FTP Server 3.2 wftpserver Wing FTP Server 3.1.2 wftpserver Wing FTP Server 3.1 wftpserver Wing FTP Server 3.0
Not Vulnerable:	wftpserver Wing FTP Server 3.6.6

Wing FTP Server HTTP Request Denial Of Service Vulnerability

Wing FTP Server is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the server to crash, resulting in a denial-of-service condition. Other attacks may also be possible.

This issue is reported to be exploitable in the Windows environment only.

Versions prior to Wing FTP Server 3.6.6 may be affected.

Wing FTP Server HTTP Request Denial Of Service Vulnerability

An attacker can use readily available network tools to exploit these issues.

Wing FTP Server HTTP Request Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more details.

Wing FTP Server HTTP Request Denial Of Service Vulnerability

References:

• Wing FTP Server Homepage (Wing FTP Server)
  
• Wing FTP Server Release Notes (Wing FTP Server)