NGC Active FTPServer 2002 FTP Command Denial Of Service Vulnerabilities
BID:7900
Info
NGC Active FTPServer 2002 FTP Command Denial Of Service Vulnerabilities
| Bugtraq ID: | 7900 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 11 2003 12:00AM |
| Updated: | Jun 11 2003 12:00AM |
| Credit: | Discovery of these issues is credited to Ziv Kamir <[email protected]>. |
| Vulnerable: |
NGC Active FTPServer 2002 2.40 |
| Not Vulnerable: | |
Discussion
NGC Active FTPServer 2002 FTP Command Denial Of Service Vulnerabilities
NGC Active FTPServer 2002 is prone to a number of denial of service vulnerabilities. If excessive input is supplied via FTP commands such as USER, cwd, ls, get, or mkdir, the server will reportedly crash. Though unconfirmed, this may be due to a boundary condition error.
NGC Active FTPServer 2002 is prone to a number of denial of service vulnerabilities. If excessive input is supplied via FTP commands such as USER, cwd, ls, get, or mkdir, the server will reportedly crash. Though unconfirmed, this may be due to a boundary condition error.
Exploit / POC
NGC Active FTPServer 2002 FTP Command Denial Of Service Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
NGC Active FTPServer 2002 FTP Command Denial Of Service Vulnerabilities
Solution:
The vendor will reportedly be released a fixed version of the software in August 2003. Users should contact the vendor for further details.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
The vendor will reportedly be released a fixed version of the software in August 2003. Users should contact the vendor for further details.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.