|
|
| |
| The USSR Team has found a buffer overflow in the Broker FTP Server, which enables an attacker to launch a denial of service attack against it. If the FTP server is running as a service, an attacker can cause the server to consume all available memory and computer resources by inputting a username that is 6000 characters or more. |
| |
Credit:
The information has been provided by Ussr Labs.
|
| |
Vulnerable systems:
Broker FTP Server version 3.x
Broker FTP Server version 4.x
Immune systems:
Broker FTP Server version 4.3.0.1
Example:
$ telnet example.com 21
Trying example.com...
Connected to example.com.
Escape character is '^]'.
220 FTP Server ready [***]
[buffer]
Where [buffer] is 6000 characters or more.
|
|
|
|
|
