=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


    Date: Ср, 10 ноя 1999  10:08:59

   От: Ussr Labs 

 Кому: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

 Тема: Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability

--------------------------------------------------------------------------------




Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability



PROBLEM



UssrLabs found a Local/Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server,

the buffer overflow is caused by a long user name / password,  2000

characters,

and the re-connection to the Ftp Server.





There is not much to expand on.... just a simple hole



Example:



Go to: http://www.ussrback.com/qvtfs42/



For the source / binary of this remote / local D.O.S





Vendor Status:

Not Contacted



Vendor   Url: http://www.qpc.com

Program Url:http://www.qpc.com



Credit: USSRLABS



SOLUTION

    Nothing yet.