PT-2005-3338 · Ftpshell · Ftpshell Server

Reed Arvin · Published 2005-08-03 · Updated 2017-07-11 · CVE-2005-2426

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FTPshell Server version 3.38

Description The issue allows remote authenticated users to cause a denial of service, resulting in an application crash. This can be achieved by establishing multiple connections and disconnections without properly terminating the session using the QUIT command.

Recommendations For FTPshell Server version 3.38, consider implementing a limit on the number of concurrent connections to prevent abuse, and ensure that all connections are properly closed using the QUIT command to minimize the risk of a denial of service.

Exploit

Fix

Related Identifiers

CVE-2005-2426

Affected Products

Ftpshell Server

References · 7

• 🔥 https://exploit-db.com/exploits/1121 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2426 · Security Note
• http://securitytracker.com/id?1014580 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21531 · Note
• http://marc.info/?l=bugtraq&m=112239297430460&w=2 · Note
• http://secunia.com/advisories/16189 · Note
• http://securityfocus.com/bid/14382 · Note