Mailing List Archive

EFTP PASV denial of service
Old versions of EFTP are vulnerable to "PASV flood". I did not really
test this script, I do not have an old EFTP...
Re: EFTP PASV denial of service [ In reply to ]
On Wed, Aug 14, 2002 at 09:16:36PM +0200, Michel Arboi wrote:
> Old versions of EFTP are vulnerable to "PASV flood". I did not really
> test this script, I do not have an old EFTP...

This is redundant with ftp_pasv_dos.nasl
Re: EFTP PASV denial of service [ In reply to ]
Renaud Deraison <deraison@nessus.org> writes:

> This is redundant with ftp_pasv_dos.nasl

I did not see it. And ftp_pasv_dos.nasl looks much better: safer (no
DoS) and quicker.
Re: EFTP PASV denial of service [ In reply to ]
> Renaud Deraison <deraison@nessus.org> writes:
>
> > This is redundant with ftp_pasv_dos.nasl
>
> I did not see it. And ftp_pasv_dos.nasl looks much better: safer (no
> DoS) and quicker.
>
could add the dos one in the if (!(safe_checks()) area.

--
Michael Scheidell, CEO
SECNAP Network Security, LLC
Sales: 866-SECNAPNET / (1-866-732-6276)
Main: 561-368-9561 / www.secnap.net
Looking for a career in Internet security?
http://www.secnap.net/employment/