[12814] in bugtraq
Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability
daemon@ATHENA.MIT.EDU (Ussr Labs)
Thu Dec 2 13:21:18 1999
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <NCBBKFKDOLAGKIAPMILPGEBGCBAA.labs@ussrback.com>
Date: Thu, 2 Dec 1999 07:14:37 -0300
Reply-To: Ussr Labs <labs@USSRBACK.COM>
From: Ussr Labs <labs@USSRBACK.COM>
X-To: BUGTRAQ <bugtraq@securityfocus.com>
To: BUGTRAQ@SECURITYFOCUS.COM
Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability
PROBLEM:
UssrLabs found a Local/Remote DoS Attack in Serv-U FTP-Server v2.5a,
The buffer overflow is caused by a bad Formed (SITE) command
For the source / binary of this remote / local D.O.S
Go to: http://www.ussrback.com/servu/
Vendor Status:
Informed, technical support request number is 101562
Vendor Url: http://ftpserv-u.deerfield.com/
Program Url: http://ftpserv-u.deerfield.com/download.cfm
Credit: thanks to dark spyrit for letting us know about this.
SOLUTION
Nothing yet.
u n d e r g r o u n d s e c u r i t y s y s t e m s r e s e a r c h
http://www.ussrback.com
