Core FTP 'auth SSL 'Command DoS Vulnerability

Release date:
Updated on:

Affected Systems:
Core FTP 1.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 65432
CVE (CAN) ID: CVE-2014-1441

CoreFTP is a free FTP client.

Core FTP 1.2 build 511 and other versions have errors in processing auth ssl commands, which can cause attackers to crash the server by using a specially crafted SSL certificate.

<* Source: Luciano Martins
Fara Rustein

Link: http://www.securelist.com/en/advisories/56850
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Core FTP
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.coreftp.com/
Http://coreftp.com/forums/viewtopic.php? T = 2985707