ProFTPD STAT Command Denial Of Service Vulnerability
BID:6341
Info
ProFTPD STAT Command Denial Of Service Vulnerability
| Bugtraq ID: | 6341 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 09 2002 12:00AM |
| Updated: | Dec 09 2002 12:00AM |
| Credit: | Discovery of this vulnerability credited to Rob klein Gunnewiek <[email protected]>. |
| Vulnerable: |
ProFTPD Project ProFTPD 1.2.7 rc3 ProFTPD Project ProFTPD 1.2.7 rc2 ProFTPD Project ProFTPD 1.2.7 rc1 ProFTPD Project ProFTPD 1.2.6 ProFTPD Project ProFTPD 1.2.5 ProFTPD Project ProFTPD 1.2.4 ProFTPD Project ProFTPD 1.2.3 ProFTPD Project ProFTPD 1.2.2 ProFTPD Project ProFTPD 1.2.1 |
| Not Vulnerable: | |
Discussion
ProFTPD STAT Command Denial Of Service Vulnerability
A denial of service vulnerability has been reported for ProFTPD. It is possible to cause ProFTPD from responding to legitimate requests for service by issuing specially crafted STAT commands. This will result in a denial of service condition.
** This issue is closely related to the vulnerability described in BID 2496.
A denial of service vulnerability has been reported for ProFTPD. It is possible to cause ProFTPD from responding to legitimate requests for service by issuing specially crafted STAT commands. This will result in a denial of service condition.
** This issue is closely related to the vulnerability described in BID 2496.
Exploit / POC
ProFTPD STAT Command Denial Of Service Vulnerability
The following proof of concept was provided:
The following proof of concept was provided:
Solution / Fix
ProFTPD STAT Command Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ProFTPD STAT Command Denial Of Service Vulnerability
References:
References:
- ProFTPD Home Page (ProFTPD)
- proftpd <=1.2.7rc3 DoS (Rob klein Gunnewiek