Prishtina FTP Client Remote Denial of Service Vulnerability

Bugtraq ID:	7671
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 23 2003 12:00AM
Updated:	May 23 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to D4rkGr3y <[email protected]>.
Vulnerable:	Prishtina Soft Prishtina FTP 1.2 Prishtina Soft Prishtina FTP 1.1 Prishtina Soft Prishtina FTP 1.0
Not Vulnerable:

Prishtina FTP Client Remote Denial of Service Vulnerability

Prishtina FTP client is allegedly prone to a denial of service vulnerability. The condition is reportedly triggered when processing FTP server banners of excessive length. As a result, a malicious attacker-controlled server may be used to crash a target users FTP client.

Prishtina FTP Client Remote Denial of Service Vulnerability

The following exploit has been made available by DHGROUP (www.dhgroup.org).

• /data/vulnerabilities/exploits/prishtina-dos.pl

Prishtina FTP Client Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Prishtina FTP Client Remote Denial of Service Vulnerability

References:

• Prishtina FTP v.1.*: remote DoS (D4rkGr3y )