PT-2004-1406 · Typsoft · Typsoft Ftp Server

Publicado 2004-03-18 · Atualizado 2017-07-11 · CVE-2004-0252

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions TYPSoft FTP Server version 1.10

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending an empty USER name.

Recommendations For TYPSoft FTP Server version 1.10, consider implementing input validation to check for empty USER names and reject such requests to prevent CPU consumption denial of service attacks.

Correção

Identificadores relacionados

CVE-2004-0252

Produtos afetados

Typsoft Ftp Server

Referências · 5

• http://securitytracker.com/alerts/2004/Feb/1008943.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0252 · Nota de Segurança
• http://securityfocus.com/bid/9573 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15048 · Nota
• http://marc.info/?l=bugtraq&m=107591511716707&w=2 · Nota