https://www.exploit-db.com/exploits/23633
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200402-001

CrobFTP服务器3.5.1版本存在漏洞。远程认证的用户借助一个后面伴随“*”字符串的大量“.”字符的目录命令导致服务拒绝。

source: http://www.securityfocus.com/bid/9549/info

A vulnerability has been reported in the Crob FTP server, which occurs due to a lack of validation of input from the user. By issuing a malformed request a malevolent user may be able to force the server to crash, denying service to legitimate users. 

dir
......................................................................................................................................................................................................................................................./*

来源:BID
名称:9549
链接:http://www.securityfocus.com/bid/9549
来源:BUGTRAQ
名称:20040201VulnerabilitiesinCrobFTPServerV3.5.1
链接:http://www.securityfocus.com/archive/1/352329
来源:XF
名称:crob-dir-dos(15105)
链接:http://xforce.iss.net/xforce/xfdb/15105
来源:SECTRACK
名称:1008908
链接:http://securitytracker.com/id?1008908
来源:SECUNIA
名称:10778
链接:http://secunia.com/advisories/10778