vendor:
ProFTPd
by:
JeT-Li
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: ProFTPd
Affected Version From: 1.2.0rc1
Affected Version To: 1.2.0rc2
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2002
ProFTPd DoS version 1.1
A memory leak has been reported in all versions of ProFTPd. The SIZE FTP command causes the server to misallocate and leak small amounts of memory each time the command is executed. If a sufficient number of these commands are executed by the server, substantial amounts of system memory can be consumed, allowing a remote attacker to carry out a denial of service attack on the affected host.
Mitigation:
Upgrade to the latest version of ProFTPd, or apply the patch provided by the vendor.