Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability

Subject: Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability
From: Ussr Labs (labsUSSRBACK.COM)
Date: Thu Dec 02 1999 - 04:13:58 CST

• Next message: John Stanners: "Re: NTmail and VRFY"
• Previous message: Gary Kuyat: "AuditBaseObjects set reveals Event 560 Object Access Audit when Taskmanager is running"
• Next in thread: Shawn Cox: "Re: Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability"
• Reply: Shawn Cox: "Re: Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability

PROBLEM:

UssrLabs found a Local/Remote DoS Attack in Serv-U FTP-Server v2.5a,

The buffer overflow is caused by a bad Formed (SITE) command

For the source / binary of this remote / local D.O.S

Go to: http://www.ussrback.com/servu/

Vendor Status:
Informed, technical support request number is 101562

Vendor Url: http://ftpserv-u.deerfield.com/
Program Url: http://ftpserv-u.deerfield.com/download.cfm

Credit: thanks to dark spyrit for letting us know about this.

SOLUTION
    Nothing yet.

u n d e r g r o u n d s e c u r i t y s y s t e m s r e s e a r c h
http://www.ussrback.com

• Next message: John Stanners: "Re: NTmail and VRFY"
• Previous message: Gary Kuyat: "AuditBaseObjects set reveals Event 560 Object Access Audit when Taskmanager is running"
• Next in thread: Shawn Cox: "Re: Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability"
• Reply: Shawn Cox: "Re: Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Tue Dec 07 1999 - 09:20:05 CST