brokerftp.txt

`Remote DoS Attack in TransSoft's Broker Ftp Server v3.5 Vulnerability  
  
PROBLEM  
  
UssrLabs found a Remote DoS Attack in TransSoft's Broker Ftp Server v3.5,  
the buffer overflow is caused by a long user name 2730 characters.  
If TransSoft's Broker Server is running as a service the service will start  
eating all memory and all computer resource CPU 100%, at the moment of no  
more memory, if this happend all system is down :(  
  
There is not much to expand on.... just a simple hole  
  
Example:  
  
Go to: http://www.ussrback.com/broker35/  
  
For the source / binary of this remote / local D.O.S  
  
  
Vendor Status:  
Not Contacted  
  
Vendor Url: http://www.transsoft.com  
Program Url:http://www.ftpcontrol.com/broker/index.html  
  
Credit: USSRLABS  
  
SOLUTION  
Nothing yet.  
  
  
`