[NEWS] WzdFTPD hash DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -



WzdFTPD hash DoS
------------------------------------------------------------------------


SUMMARY

<http://www.wzdftpd.net/> WzdFTPD is "a ftp server designed to be modular
and portable, work under linux/win32/freebsd/openbsd, and to be entirely
configurable online using SITE commands. It supports SSL, IPv6,
multithreading, external scripts, and it uses Unix-like permissions and
ACLs, with virtual users and groups".

WzdFTPD project also supports bandwidth limitation (per user, per group,
or globally), group administrators, and per command authorization.

A vulnerability in WzdFTPD allows remote attackers to issue a specially
crafted request to the FTP server causing it to reference a NULL pointer,
causing the program to crash.

DETAILS

Vulnerable Systems:
* WzdFTPD version 8.0

Immune Systems:
* WzdFTPD version 8.1

Workaround:
Add "key != NULL" condition in the chtbl_lookup function of the hash.c
file until vendor solution or upgrade to 8.1.


ADDITIONAL INFORMATION

The information has been provided by <mailto:jesparza@xxxxxxxxxx> Jose
Miguel Esparza.
The original article can be found at:
<http://www.s21sec.com/avisos/s21sec-033-en.txt>
http://www.s21sec.com/avisos/s21sec-033-en.txt



========================================


This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@xxxxxxxxxxxxxx
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@xxxxxxxxxxxxxx


====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

Relevant Pages

  • [EXPL] TinyWeb Server DoS Exploit
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... The information in this bulletin is provided "AS IS" without warranty of any kind. ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [UNIX] SquirrelMail Cross Site Scripting in Encoded Text
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... SquirrelMail has all the functionality you would want from an email ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [EXPL] VLC Media Player DoS (Exploit)
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... VLC Media Player DoS ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [UNIX] Online Store Kit SQL Injection Vulnerability
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... SQL Injection: ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [NT] Norton AntiSpam Remote Buffer Overrun (SymSpamHelper)
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... An ActiveX control bundled with Norton AntiSpam suffers from a bug that ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)