medium5.0Public exploit code
CVE-2001-0965
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (aster…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- glFTPd 1.x - 'LIST' Denial of Service2001-08-17 · dos · unix · Verified
Impact
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Glftpd | Glftpd | Versions 1.13.6, 1.16.9, 1.17.2, 1.18a, 1.19, 1.20 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0239.html
- http://www.glftpd.org/
- http://www.iss.net/security_center/static/7001.php
- http://www.securityfocus.com/bid/3201
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0239.html
- http://www.glftpd.org/
- http://www.iss.net/security_center/static/7001.php
- http://www.securityfocus.com/bid/3201