Description
Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file.
References
- 11206 third-party-advisory
- 9953 vdb-entry
- 20040323 How to crash a harddisk - the Ipswitch WS_FTP Server way mailing-list
- wsftp-rest-stor-dos(41831) vdb-entry
- 4542 vdb-entry
- wsftp-rest-dos(15560) vdb-entry
- 1009529 vdb-entry