CVE-2015-5917 Information

Description

The glob implementation in tnftpd (formerly lukemftpd) as used in Apple OS X before 10.11 allows remote attackers to cause a denial of service (memory consumption and daemon outage) via a STAT command containing a crafted pattern as demonstrated by multiple instances of the ……/* substring.

Reference

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html http://www.securityfocus.com/bid/76908 http://www.securitytracker.com/id/1033703 https://cxsecurity.com/issue/WLB-2013040082 https://support.apple.com/HT205267 https://www.youtube.com/watch?v=MBK4QYkUm10