vendor:
wu-ftpd
by:
str0ke
7.5
CVSS
HIGH
Denial of Service (DoS)
400
CWE
Product Name: wu-ftpd
Affected Version From: <= 2.6.2
Affected Version To: <= 2.6.2
Patch Exists: NO
Related CWE:
CPE: a:wu_ftpd_project:wu_ftpd:2.6.2
Platforms Tested: Linux
wu-ftpd <= 2.6.2 File Globbing DoS
This exploit allows an attacker to cause a denial of service by sending a specially crafted request to the vulnerable FTP server. The vulnerability exists in the file globbing functionality of the wu-ftpd server. By sending a specific request, an attacker can cause the server to enter an infinite loop, consuming all available resources and making the server unresponsive.
Mitigation:
Update to a patched version of wu-ftpd or switch to a different FTP server software.