Bugtraq mailing list archives

Bounce vulnerability in SpoonFTP 1.1.0.1

From: "Arne Vidstrom" <arne.vidstrom () ntsecurity nu>
Date: Sun, 20 Jan 2002 03:05:32 +0100

The vulnerability:

The FTP server is vulnerable to the FTP bounce attack, even against ports
lower than 1024.

Vendor Response:

Pi-Soft have created a new version that among other things fix this
vulnerability. Their response was very nice and quick.


/Arne Vidstrom, http://ntsecurity.nu

Current thread:

Bounce vulnerability in SpoonFTP 1.1.0.1 Arne Vidstrom (Jan 20)