vendor:
PowerFTP server
by:
Morgan A.
7.5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: PowerFTP server
Affected Version From: All versions
Affected Version To: All versions
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2000
Remote DoS Exploit for PowerFTP server
PowerFTP server does not properly handle long user names. When excessive data is supplied as an argument to the FTP 'USER' command, the server becomes unstable. Exploitation of this vulnerability typically results in a crash of the server, requiring a manual restart to resume FTP service.
Mitigation:
Ensure that user names are of reasonable length and do not contain excessive data.