Description
The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service (crash) via requests with two percent (%) signs in the CMD parameter.
References
- surgeftp-web-interface-dos(15001) vdb-entry
- http://members.lycos.co.uk/r34ct/main/surge_FTP/surge-ftp.txt
- 10758 third-party-advisory
- 3788 vdb-entry
- 9554 vdb-entry
- 1008898 vdb-entry