EUVD-2005-2240

Malware in sbrugna...

EUVD-2004-0376

Malware in sbrugna...

Debian DSA-473-1 : oftpd - denial of service

A vulnerability was discovered in oftpd, an anonymous FTP server, whereby a remote attacker could cause the oftpd process to crash by specifying a large value in a PORT command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

GLSA-200403-08 : oftpd DoS vulnerability

The remote host is affected by the vulnerability described in GLSA-200403-08 oftpd DoS vulnerability Issuing a port command with a number higher than 255 causes the server to crash. The port command may be issued before any authentication takes place, meaning the attacker does not need to know a...

CVE-2004-0376

oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service crash via a PORT command with a large value...

[SECURITY] [DSA 473-1] New oftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 473-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 3rd, 2004 http://www.debian.org/security/faq -...

oftpd PORT Command Remote DoS

The remote FTP server seems to be running oftpd version 0.3.6 or older. There is a bug in this version which may allow an attacker to disable this service remotely by sending a malformed PORT command. An attacker may exploit this flaw to prevent this system from doing its job. C Tenable Network...

[ GLSA 200403-08 ] oftpd DoS vulnerability

Gentoo Linux Security Advisory GLSA 200403-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

oftpd DoS vulnerability

Background Quote from http://www.time-travellers .org/oftpd/ "oftpd is designed to be as secure as an anonymous FTP server can possibly be. It runs as non-root for most of the time, and uses the Unix chroot command to hide most of the systems directories from external users - they cannot change...