Adam Zabrocki has reported a vulnerability in WU-FTPD, which can be exploited by malicious users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the handling of "ls" queries with multiple wildcard chars (*). This causes WU-FTPD to consume large amounts of CPU resources and may cause the system to become unresponsive by issuing multiple queries simultaneously.

The vulnerability has been reported in versions 2.6.1 and 2.6.2. Prior versions may also be affected.

Solution
Do not grant access to untrusted users.

Provided and/or discovered by
Adam Zabrocki (pi3 / pi3ki31ny)

Original Advisory
iDEFENSE:
http://www.idefense.com/application/poi/display?id=207&type=vulnerabilities

Deep Links
Links available in Customer Area