Pure-FTPd: Potential DoS when maximum connections is reached

Pure-FTPd: Potential DoS when maximum connections is reached Pure-FTPd contains a bug potentially allowing a Denial of Service attack when the maximum number of connections is reached. Pure-FTPd 2004-07-04 2006-05-22 54590 remote 1.0.18-r1 1.0.18

Pure-FTPd is a fast, production-quality and standards-compliant FTP server.

Pure-FTPd contains a bug in the accept_client function handling the setup of new connections.

When the maximum number of connections is reached an attacker could exploit this vulnerability to perform a Denial of Service attack.

There is no known workaround at this time. All users are encouraged to upgrade to the latest available version.

All Pure-FTPd users should upgrade to the latest stable version:


    # emerge sync
    
    # emerge -pv ">=net-ftp/pure-ftpd-1.0.18-r1"
    # emerge ">=net-ftp/pure-ftpd-1.0.18-r1"

Pure-FTPd website CVE-2004-0656 jaervosz