Description
WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline.
References
- 20040228 Multiple WFTPD Denial of Service vulnerabilities mailing-list
- 11001 third-party-advisory
- 9767 vdb-entry
- wftpd-string-0Ahbyte-dos(15341) vdb-entry
- 4115 vdb-entry