ProFTPD STAT Command Remote DoS

This script is Copyright (C) 2001-2016 Tenable Network Security, Inc.


Synopsis :

The remote FTP server is affected by a denial of service
vulnerability.

Description :

The remote FTP server is affected by a denial of service vulnerability
that is triggered when it receives a specially crafted STAT command.
A remote attacker can exploit this to cause the consumption of all
available memory.

See also :

http://www.securityfocus.com/archive/1/303007/30/0/threaded

Solution :

If using ProFTPD, upgrade to version 1.2.2 and modify the
configuration file to include :

DenyFilter \*.*/

Otherwise, contact the vendor for a solution.

Risk factor :

High / CVSS Base Score : 7.1
(CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C)
CVSS Temporal Score : 6.7
(CVSS2#E:H/RL:W/RC:ND)
Public Exploit Available : true

Family: FTP

Nessus Plugin ID: 10634 ()

Bugtraq ID: 6341

CVE ID: