QID 38908

A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.

To exploit the vulnerability, an unauthenticated attacker could send specially crafted packets to a Windows computer that is processing connections on TCP port 21. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding.

QID Detection Logic (Unauthenticated):
This QID checks for vulnerable FTP server by checking the banner of FTP server.

Successful exploitation of the vulnerability may result in Denial of Service attacks.