Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV" requests.
The product does not properly control the allocation and maintenance of a limited resource.
Link | Tags |
---|---|
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html | mailing list |
http://www.securityfocus.com/bid/2976 | vdb entry patch vendor advisory |