medium5.0Public exploit code
CVE-2005-3294
Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TYPSoft FTP Server 1.10 - 'RETR' Denial of Service (2)2010-12-29 · dos · windows · Verified
- TYPSoft FTP Server 1.10 - 'RETR' Denial of Service (1)2010-05-14 · dos · windows · Verified
- TYPSoft FTP Server 1.11 - 'RETR' Denial of Service2005-10-14 · dos · windows · Verified
Impact
Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typsoft | Typsoft Ftp Server | through 1.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17196
- http://www.exploit-db.com/exploits/15860
- http://www.exploitlabs.com/files/advisories/EXPL-A-2005-016-typsoft-ftpd.txt
- http://www.osvdb.org/19992
- http://www.securityfocus.com/bid/15104
- http://secunia.com/advisories/17196
- http://www.exploit-db.com/exploits/15860
- http://www.exploitlabs.com/files/advisories/EXPL-A-2005-016-typsoft-ftpd.txt
- http://www.osvdb.org/19992
- http://www.securityfocus.com/bid/15104