ProFTPD SFTP Integer Overflow vulnerability
Last Update Date:
30 Sep 2013 10:55
Release Date:
30 Sep 2013
4195
Views
RISK: Medium Risk
TYPE: Servers - Other Servers

A vulnerability has been identified in ProFTPD, which can be exploited by remote user can cause denial of service conditions.
A remote user can send specially crafted data to trigger an integer overflow in the sftp_kbdint_recv_response() function in 'contrib/mod_sftp/kbdint.c' and consume excessive memory resources on the target system.
Systems configured with mod_sftp and mod_sftp_pam are affected.
Impact
- Denial of Service
System / Technologies affected
- ProFTPd
Solutions
- NOTE: Vulnerability has no patch available
Vulnerability Identifier
Source
Related Link
Share with