CVE-2013-4359: Integer Overflow
Integer overflow in kbdint.c in modsftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value in an authentication request, which triggers a large memory allocation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4359?
CVE-2013-4359 has a severity rating that indicates it can cause a denial of service due to memory consumption issues.
How do I fix CVE-2013-4359?
To fix CVE-2013-4359, upgrade to ProFTPD version 1.3.5 or later which addresses this integer overflow vulnerability.
What causes the vulnerability CVE-2013-4359?
CVE-2013-4359 is caused by an integer overflow in the kbdint.c file in mod_sftp, triggered by a large response count value during authentication.
Which versions of ProFTPD are affected by CVE-2013-4359?
CVE-2013-4359 affects ProFTPD versions 1.3.4d and 1.3.5r3.
What types of attacks can exploit CVE-2013-4359?
CVE-2013-4359 can be exploited by remote attackers to cause denial of service through excessive memory consumption.