The host is running Home Ftp Server and is prone to Denail of Service and Directory Traversal Vulnerabilities using Invalid commands.

Successful exploitation will allow attackers to to cause a denial of service or directory traversal attacks on the affected application. Impact Level: Application

Upgrade to Home FTP Server version 1.10.3.144 or later. For updates refer to http://downstairs.dnsalias.net/homeftpserver.html

- An error in the handling of multiple 'SITE INDEX' commands can be exploited to stop the server. - An input validation error when handling the MKD FTP command can be exploited to create directories outside the FTP root or create files with any contents in arbitrary directories via directory traversal sequences in a file upload request.

Home FTP Server version 1.10.1.139 and prior.

• http://seclists.org/bugtraq/2009/Nov/111
• http://secunia.com/advisories/37381
• http://www.vupen.com/english/advisories/2009/3269

---

Updated on 2015-03-25