Description
The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) via a malformed response to a PASV command.
References
- 26061 third-party-advisory
- 37909 vdb-entry
- 2883 third-party-advisory
- ADV-2007-2528 vdb-entry
- surgeftp-pasv-dos(35376) vdb-entry
- http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070710/98374694/attachment-0030.txt
- 20070710 Portcullis Computer Security Ltd - Advisories mailing-list