Check Point Advisories

Preemptive Protection against Golden FTP USER Denial of Service Vulnerability

Check Point Reference:	CPAI-2006-151
Date Published:	19 Dec 2006
Severity:	Critical
Last Updated:	Wednesday 02 May, 2007
Source:	Secunia Advisory: SA23323
Industry Reference:	CVE-2005-0634
Protection Provided by:
Who is Vulnerable?	Golden FTP Server version 1.92
Vulnerability Description	Golden FTP Server is an FTP server application for Microsoft Windows. The application is susceptible to a remote denial of service vulnerability. The issue is triggered when a 'USER' command with a lengthy parameter line is passed to the server, causing it to crash.
Vulnerability Details	The vulnerability is caused due to an error when processing an overly long argument passed to the 'USER' command. A remote attacker can cause the service to crash via an overly long parameter.