Detections
Analytics
TYPSoft FTP Server Multiple DoS
medium Nessus Network Monitor Plugin ID 2270
Synopsis
The remote host is vulnerable to multiple attack vectors.Description
The remote host appears to be running TYPSoft FTP Server. It is reported that version up to and including 1.11 are prone to multiple vulnerabilities.- A denial-of-service vulnerability when an authenticated user issues two 'RETR' request in a row, without actualy downloading the files.
- A denial-of-service vulnerability when handling data passed to the 'APPE' and 'DELE' commands via the same socket connection.
- A denial-of-service vulnerability when handling a malformed 'ABORT' command.
Solution
No solution is known at this time.Plugin Details
Severity: Medium
ID: 2270
Family: FTP Servers
Published: 9/9/2004
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 5.1
CVSS v2
Risk Factor: Medium
Base Score: 4
Temporal Score: 3.8
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P
CVSS v3
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 4.2
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:F/RL:U/RC:X
Vulnerability Information
CPE: cpe:/a:typsoft:typsoft_ftp_server