Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability

[labs () USSRBACK COM (Ussr Labs)]

Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability

PROBLEM

UssrLabs found a Local/Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server,
the buffer overflow is caused by a long user name / password,  2000
characters,
and the re-connection to the Ftp Server.

There is not much to expand on.... just a simple hole

Example:

Go to: http://www.ussrback.com/qvtfs42/

For the source / binary of this remote / local D.O.S

Vendor Status:
Not Contacted

Vendor   Url: http://www.qpc.com
Program Url:http://www.qpc.com

Credit: USSRLABS

SOLUTION
    Nothing yet.