PT-2005-3338 · Ftpshell · Ftpshell Server

Reed Arvin · Publicado 2005-08-03 · Atualizado 2017-07-11 · CVE-2005-2426

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FTPshell Server version 3.38

Description The issue allows remote authenticated users to cause a denial of service, resulting in an application crash. This can be achieved by establishing multiple connections and disconnections without properly terminating the session using the QUIT command.

Recommendations For FTPshell Server version 3.38, consider implementing a limit on the number of concurrent connections to prevent abuse, and ensure that all connections are properly closed using the QUIT command to minimize the risk of a denial of service.

Exploit

Correção

Identificadores relacionados

CVE-2005-2426

Produtos afetados

Ftpshell Server

Referências · 7

• 🔥 https://exploit-db.com/exploits/1121 · Exploit
• http://securitytracker.com/id?1014580 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21531 · Nota
• http://marc.info/?l=bugtraq&m=112239297430460&w=2 · Nota
• http://secunia.com/advisories/16189 · Nota
• http://securityfocus.com/bid/14382 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2426 · Nota de Segurança