QPC QVT Suite FTP Server DoS Vulnerability
BID:796
Info
QPC QVT Suite FTP Server DoS Vulnerability
| Bugtraq ID: | 796 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-1999-1539 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Nov 10 1999 12:00AM |
| Updated: | Jul 11 2009 12:56AM |
| Credit: | Discovered and posted to Bugtraq by Ussr Labs <[email protected]> on November 10, 1999. |
| Vulnerable: |
QPC Software QVT/Term 4.3 QPC Software QVT/Net 4.3 |
| Not Vulnerable: | |
Discussion
QPC QVT Suite FTP Server DoS Vulnerability
The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a username/password pair is specified that is longer than 2000 characters combined, the server will drop the connection with an 'authentication failed' message. The next time someone tries to connect, the server will crash.
The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a username/password pair is specified that is longer than 2000 characters combined, the server will drop the connection with an 'authentication failed' message. The next time someone tries to connect, the server will crash.
Solution / Fix
QPC QVT Suite FTP Server DoS Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].