Description
NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS device name such as con.
References
- 20010619 SurgeFTP vulnerabilities mailing-list
- http://netwinsite.com/surgeftp/manual/updates.htm
- 2891 vdb-entry
- surgeftp-concon-dos(6712) vdb-entry