Back to list
Denial of Service vulnerability in War FTP Daemon 1.82
Feb 26 2013 09:29AM
Jarle Aase (jgaa jgaa com)
Late last week, security researchers at jura.ba reported a Denial of
Service vulnerability in War FTP Daemon 1.82.
The problem was rooted in the way log messages was relayed from the
internal log handler to the Windows Event log when the sever was running
as a Windows service. Theoretically, it could be possible to execute
remote code using this vulnerability.
I am therefore rating this vulnerability as critical.
A fix for the problem can be downloaded from http://www.warftp.org/?menu=344
Jarle Aase email: jgaa (at) jgaa (dot) com [email concealed]
Author of Free Software. http://www.jgaa.com
War FTP Daemon: http://www.warftp.org
Other free software: http://products.jgaa.com
NB: If you reply to this message, please include all relevant
information from the conversation in your reply. Thanks.
<<< no need to argue - just kill'em all! >>>
[ reply ]
Copyright 2010, SecurityFocus