FTP client/server and listen() implementation

Here is exploit. It works as described in NAI 1996 bulletin http://www.nai.com/nailabs/aspset/advisory/ftp-paper.asp but.... there are two points i'm disagree with NAI. 1. ftp console client under FreeBSD 2.2.x IS vulnerable 2. Inspite I don't treat FTP as secured protocol IMHO it's OS/software...

PT-1997-1040 · Bisonware · Bisonware Ftp Server

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. Recommendations: At the moment, there is n...

PT-1997-1039 · Washington University · Wu-Ftpd

Name of the Vulnerable Software and Affected Versions: wu-ftp affected versions not specified Description: A buffer overflow issue exists in wu-ftp, triggered by the PASV command, which causes a core dump. Recommendations: At the moment, there is no information about a newer version that contains...