Home page logo
/

bugtraq logo Bugtraq mailing list archives

Denial of Service vulnerability in War FTP Daemon 1.82
From: Jarle Aase <jgaa () jgaa com>
Date: Tue, 26 Feb 2013 11:29:53 +0200

Late last week, security researchers at jura.ba reported a Denial of Service vulnerability in War FTP Daemon 1.82.

The problem was rooted in the way log messages was relayed from the internal log handler to the Windows Event log when the sever was running as a Windows service. Theoretically, it could be possible to execute remote code using this vulnerability.

I am therefore rating this vulnerability as critical.

A fix for the problem can be downloaded from http://www.warftp.org/?menu=344

jgaa
--
Jarle Aase                      email: jgaa () jgaa com
Author of Free Software.        http://www.jgaa.com

War FTP Daemon:                 http://www.warftp.org
Other free software:            http://products.jgaa.com

NB: If you reply to this message, please include all relevant
information from the conversation in your reply. Thanks.
<<< no need to argue - just kill'em all! >>>


  By Date           By Thread  

Current thread:
  • Denial of Service vulnerability in War FTP Daemon 1.82 Jarle Aase (Feb 26)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]