CVE-2004-0325 TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (...
LowCVSS 2.1
EPSS 3.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (8) rnfr, (9) rnto, (10) rmd, or (11) xrmd, as demonstrated using "//../qwerty".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| typsoft ftp server | = 1.10 | No fix listed |
References
- 20040223 TYPSoft FTP Server 1.10 multiple vulnerabilities mailing-list
- 9702 exploit vdb-entry
- typsoft-ftp-command-dos(15306) vdb-entry