This host is running FreeFTPD Server and is prone to denial of service vulnerability.

Successful exploitation allows remote attackers to crash an affected server, effectively denying service to legitimate users. Impact Level: Application

Upgrade to freeFTPd version 1.0.11 or later For updates refer to http://www.freesshd.com/?ctt=download

A NULL pointer dereferencing error exists when parsing the parameter of the PORT command. Logged on user can send a port command appended with some numbers to crash the server.

freeFTPd version 1.0.10 and prior

• http://osvdb.org/show/osvdb/21108
• http://secunia.com/advisories/17737
• http://www.exploit-db.com/exploits/1339/
• http://www.securityfocus.com/archive/1/417602

---

Updated on 2015-03-25