XLight FTP Server Tilde Remote Denial Of Service Vulnerability

Bugtraq ID:	9215
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 15 2003 12:00AM
Updated:	Dec 15 2003 12:00AM
Credit:	Discovery credited to Ziv Kamir.
Vulnerable:	XLight FTP Server XLight FTP Server 1.25
Not Vulnerable:	XLight FTP Server XLight FTP Server 1.41

XLight FTP Server Tilde Remote Denial Of Service Vulnerability

A problem has been identified in the XLight FTP Server when handling certain characters on the commandline. An attacker could take advantage of this issue to perform a denial of service on vulnerable hosts.

XLight FTP Server Tilde Remote Denial Of Service Vulnerability

No exploit is required for this issue.

XLight FTP Server Tilde Remote Denial Of Service Vulnerability

Solution:
It has been reported that this issue is resolved in version 1.41 of the software. This has not been confirmed by the software vendor or Symantec.
-----
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

XLight FTP Server Tilde Remote Denial Of Service Vulnerability

References:

• Product Homepage (XLight FTP Server)
  
• Release notes for Xlight ftp server 1.41 (XLight FTP Server)