[33789] in bugtraq
CesarFTP 0.99 : 100% employment of computer resources
daemon@ATHENA.MIT.EDU (intuit e.b.)
Wed Feb 18 11:30:50 2004
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
From: "intuit e.b." <intuit@linuxmail.org>
To: bugtraq@securityfocus.com
Date: Wed, 18 Feb 2004 05:47:29 +0800
Message-Id: <20040217214729.7F94C23942@ws5-3.us4.outblaze.com>
Application: CesarFTP
http://www.aclogic.com/
Version: 0.99e
Bug: 100% employment of computer resources
Author: intuit
e-mail: intuit@linuxmail.org
web: http://rootshells.tk/
***********************************************************************
1. Description
2. The bug
3. The fix
***********************************************************************
^^^^^^^^^^^^^^^^
1. Description:
^^^^^^^^^^^^^^^^
Vendor's Description:
"CesarFTP is an easy-to-use and fast to configure FTP server.
Fed up with modifying your hard disk structure to share your file?
Then enjoy CesarFTP virtual file system support!"
***********************************************************************
^^^^^^^^^^^^^^^^
2. The bug:
^^^^^^^^^^^^^^^^
The string(RETR param) over 4084 symbols leads to 100% to employment of resources :
-----------------------------------------------------------------------
ftp://user:pass@127.0.0.1/< ... >=4084 symbols ... >/
-----------------------------------------------------------------------
and application server.exe employment 100% of computer resources.
***********************************************************************
^^^^^^^^^^^^^^^^
3. The fix:
^^^^^^^^^^^^^^^^
Not exist.
***********************************************************************
--
______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
Powered by Outblaze
