ProFTPD Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in ProFTPD version 1.3.7a. This vulnerability allows attackers to overwhelm the FTP server by establishing multiple simultaneous connections. By using threading to create these connections, attackers can exhaust the server's connection limits, effectively blocking access for legitimate users.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, where legitimate users are unable to connect to the FTP server due to the exhaustion of available connections.

Reproduction

The vulnerability can be reproduced by using a script that automates the process of opening multiple FTP connections to the server. This can be done by specifying the target server's IP address, the FTP port (default is 21), and the maximum number of connections to establish (default is 50). The script will then open the specified number of connections, which can disrupt normal user access to the server.