|
|
| |
| EFTP is an FTP server and client solution that allows encrypted FTP connections between the providing FTP server and the client. The product contains two security vulnerabilities that allow a remote attacker to cause a Denial of Service attack against the product. |
| |
Credit:
The security hole was discovered by SecuriTeam.
|
| |
First attack:
Send a buffer of 2100 characters upon connection will crash the server.
Second attack:
Connect to the server with a non-FTP program (something you write by yourself). Send some characters, and disconnect without sending a '\r\n'. The server will crash immediately.
Solution:
Version 2.0.5.316 of EFTP fixes this problem, and can be downloaded from: www.eftp.org.
|
|
|
