MC.Iglo has discovered a vulnerability in War FTP Daemon, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the handling of certain commands. This can be exploited to crash a vulnerable service or cause it to consume a large amount of CPU and memory resources by supplying a specially crafted string as argument to e.g. the "CWD" or "USER" commands.

Successful exploitation requires that War FTP runs as a service.

The vulnerability has been confirmed on version 1.82.00-RC9. Versions 1.70 through 1.82.00-RC8 are reportedly also affected.

Solution
Update to version 1.82.00-RC10.
Further details available to Secunia VIM customers

Provided and/or discovered by
Originally discovered by:
MC.Iglo

Additional information provided by:
class101
SkyLined

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers