PT-2004-1406 · Typsoft · Typsoft Ftp Server

Published 2004-03-18 · Updated 2017-07-11 · CVE-2004-0252

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions TYPSoft FTP Server version 1.10

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending an empty USER name.

Recommendations For TYPSoft FTP Server version 1.10, consider implementing input validation to check for empty USER names and reject such requests to prevent CPU consumption denial of service attacks.

Fix

Related Identifiers

CVE-2004-0252

Affected Products

Typsoft Ftp Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-0252 · Security Note
• http://securityfocus.com/bid/9573 · Vendor Advisory
• http://securitytracker.com/alerts/2004/Feb/1008943.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15048 · Note
• http://marc.info/?l=bugtraq&m=107591511716707&w=2 · Note