A vulnerability has been identified in Bftpd, which could be exploited by remote attackers to cause a denial of service. This issue is caused by an unspecified error when processing malformed packets, which could be exploited to create a denial of service condition. No further details have been disclosed.

Affected Products

Bftpd versions prior to 2.4

Solution

Upgrade to Bftpd version 2.6 :
http://bftpd.sourceforge.net/download.html

References

http://www.vupen.com/english/advisories/2009/3032
http://bftpd.sourceforge.net/news.html#032130

Credits

Vulnerability reported by Dazhi.

Changelog

2009-10-26 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.