CVE-2021-47865
HIGHProFTPD 1.3.7a - Denial of Service via Multiple Simultaneous FTP Connections
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47865. PoCs published by xynmaps.
AI-analyzed exploit summary This exploit performs a Denial of Service (DoS) attack against ProFTPD 1.3.7a by flooding the server with multiple FTP connections, exhausting its connection limit. It uses threading to spawn multiple FTP processes and includes a timer to restart the attack periodically.
Description
ProFTPD 1.3.7a contains a denial of service vulnerability that allows attackers to overwhelm the server by creating multiple simultaneous FTP connections. Attackers can repeatedly establish connections using threading to exhaust server connection limits and block legitimate user access.
Exploits (1)
This exploit performs a Denial of Service (DoS) attack against ProFTPD 1.3.7a by flooding the server with multiple FTP connections, exhausting its connection limit. It uses threading to spawn multiple FTP processes and includes a timer to restart the attack periodically.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H