T. Hauck Jana Server FTP Server PASV Mode Port Exhaustion Denial Of Service Vulnerability
BID:5325
Info
T. Hauck Jana Server FTP Server PASV Mode Port Exhaustion Denial Of Service Vulnerability
| Bugtraq ID: | 5325 |
| Class: | Design Error |
| CVE: |
CVE-2002-1063 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 26 2002 12:00AM |
| Updated: | Jul 11 2009 02:56PM |
| Credit: | Discovered by 3APA3A <[email protected]>. |
| Vulnerable: |
T. Hauck Jana Webserver 2.2.1 T. Hauck Jana Webserver 2.0 Beta2 T. Hauck Jana Webserver 2.0 Beta1 T. Hauck Jana Webserver 2.0 T. Hauck Jana Webserver 1.46 T. Hauck Jana Webserver 1.45 T. Hauck Jana Webserver 1.0 |
| Not Vulnerable: | |
Discussion
T. Hauck Jana Server FTP Server PASV Mode Port Exhaustion Denial Of Service Vulnerability
Jana Server is a server for Microsoft Windows based systems. Jana Server provides a wide range of proxy servers, and a number of other services, including a FTP server.
An authenticated remote user may use the PASV command to force Jana Server to open a new connection. Reportedly, this connection does not time out, and will remain open indefinitely. A malicious user may make a number of PASV requests and exhaust all TCP ports on the vulnerable system.
Jana Server is a server for Microsoft Windows based systems. Jana Server provides a wide range of proxy servers, and a number of other services, including a FTP server.
An authenticated remote user may use the PASV command to force Jana Server to open a new connection. Reportedly, this connection does not time out, and will remain open indefinitely. A malicious user may make a number of PASV requests and exhaust all TCP ports on the vulnerable system.
Exploit / POC
T. Hauck Jana Server FTP Server PASV Mode Port Exhaustion Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
T. Hauck Jana Server FTP Server PASV Mode Port Exhaustion Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
T. Hauck Jana Server FTP Server PASV Mode Port Exhaustion Denial Of Service Vulnerability
References:
References:
- Jana Webserver (Thomas Hauck)