Check Point Advisories

Preemptive Protection against GlobalSCAPE Secure FTP Server Remote Denial of Service

Check Point Reference:	CPAI-2006-048
Date Published:	22 May 2006
Severity:	Low
Last Updated:	Monday 07 May, 2007
Source:	OSVDB ID: 24451
Industry Reference:	CVE-2006-1693
Protection Provided by:
Who is Vulnerable?	GlobalSCAPE Secure FTP Server prior to 3.1.4
Vulnerability Description	GlobalSCAPE Secure FTP Server is an FTP server application for Microsoft Windows. The application is susceptible to a remote denial of service vulnerability. The issue is triggered when an unspecified custom command with a lengthy parameter line is passed to the server, causing the server to crash.
Update/Patch Avaliable	Update to version 3.1.4 Build 01.10.2006. http://globalscape.com/downloads/gsftps.asp
Vulnerability Details	The vulnerability is caused due to an unspecified error in the processing of custom commands. The service and can be crashed using an overly long parameter.