Xlight FTP Server SFTP/SSH2 connection Denial of Service Vulnerability

Release date: 2011-11-14
Updated on: 2011-11-15

Affected Systems:
XLight FTP Server 3.x
Description:
--------------------------------------------------------------------------------
Xlight FTP Server is a high-performance FTP Server software on Windows.

The Xlight SFTP/SSH2 virtual server denies the first user who opens the file from accessing the file. This vulnerability may prevent other users from downloading the file.

<* Source: vendor

Link: http://www.xlightftpd.com/whatsnew.htm
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

XLight FTP Server
-----------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.xlightftpd.com/index.htm