CVE-2005-2426

ftpshell_server 3.38 - Authenticated Denial of Service via Repeated Connection Without QUIT

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-2426. PoCs published by Reed Arvin.

AI-analyzed exploit summary This exploit targets FTPshell Server Version 3.38 by repeatedly sending login and PORT commands to trigger a denial-of-service condition. It establishes multiple connections to exhaust server resources.

Description

FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple connections and disconnections without using the QUIT command.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Reed Arvin · perldoswindows
https://www.exploit-db.com/exploits/1121

This exploit targets FTPshell Server Version 3.38 by repeatedly sending login and PORT commands to trigger a denial-of-service condition. It establishes multiple connections to exhaust server resources.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: FTPshell Server Version 3.38
Auth required
Prerequisites: Network access to the target FTP server · Valid or guessable FTP credentials
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16189
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/21531
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014580
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14382
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112239297430460&w=2

Scores

EPSS 0.0138
EPSS Percentile 68.5%

Details

Status published
Products (1)
ftpshell/ftpshell_server 3.38
Published Aug 03, 2005
Tracked Since Feb 18, 2026