ProFTPD STAT Command Remote DoS

This script is Copyright (C) 2001-2014 Tenable Network Security, Inc.


Synopsis :

The remote FTP server is prone to a denial of service attack.

Description :

The remote FTP server seems to consume all available memory on the
remote host when it receives a specially crafted command.

See also :

http://www.securityfocus.com/archive/1/303007/30/0/threaded

Solution :

If using ProFTPD, upgrade to version 1.2.2 and modify the
configuration file to include :

DenyFilter \*.*/

Otherwise, contact your vendor.

Risk factor :

High / CVSS Base Score : 7.1
(CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C)
CVSS Temporal Score : 6.7
(CVSS2#E:H/RL:W/RC:ND)
Public Exploit Available : true

Family: FTP

Nessus Plugin ID: 10634 ()

Bugtraq ID: 6341

CVE ID: