Published: 12/03/2001 Updated: 26/01/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 515

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Memory leak in ProFTPd 1.2.0rc2 allows remote malicious users to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.

Vulnerable Product	Search on Vulmon	Subscribe to Product
proftpd proftpd 1.2.0
mandrakesoft mandrake linux 7.2
debian debian linux 2.2
conectiva linux

The following problems have been reported for the version of proftpd in Debian 22 (potato): There is a memory leak in the SIZE command which can result in a denial of service, as reported by Wojciech Purczynski This is only a problem if proftpd cannot write to its scoreboard file; the default configuration of proftpd in Debian is not vulnerable ...

/* | Proftpd DoS | by Piotr Zurawski (szur@ixrenetpl) | This source is just an example of memory leakage in proftpd-120(rc2) | server discovered by Wojciech Purczynski | */ #include <stdioh> #include <unistdh> #include <stdlibh> #include <signalh> #include <timeh> #include <stringh> #include &lt ...

/* ProFTPd DoS version 11 Remote DoS in proFTPd Code by: JeT-Li -The Wushu Master- jet_li_man@yahoocom Recently I posted a remote DoS for ProFTPd based in the multiple use of the SIZE command in order to crash the system Now and thanks to the information provided by Wojciech Purczynski I have coded ...

source: wwwsecurityfocuscom/bid/2185/info A memory leak has been reported in all versions of ProFTPd The SIZE FTP command causes the server to misallocate and leak small amounts of memory each time the command is executed If a sufficient number of these commands are executed by the server, substantial amounts of system memory can be c ...

CWE-401 http://www.securityfocus.com/archive/1/152206 http://archives.neohapsis.com/archives/bugtraq/2001-01/0122.html http://archives.neohapsis.com/archives/bugtraq/2001-01/0132.html http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-021.php3 http://www.debian.org/security/2001/dsa-029 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000380 http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5801 https://nvd.nist.gov https://www.debian.org/security/./dsa-029 https://www.exploit-db.com/exploits/241/

CVE-2001-0136

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect