Re: Denial of Service via SFTP (Stack Exhaustion)
I have added this issue to the tracker:
https://winscp.net/tracker/1999
https://winscp.net/tracker/1999
- martin
Post a reply
Before posting, please read how to report bug or request support effectively.
Bug reports without an attached log file are usually useless.
Topic review
- martin
Re: Denial of Service via SFTP (Stack Exhaustion)
Thanks for your report. Can give us some instructions for starting the server? We have no experience with Node.js. Or just describe how the DoS attack works.
- Zlynt
Denial of Service via SFTP (Stack Exhaustion)
With the use of a malicious server, it is possible to cause a stack exhaustion.
Run a local or remote server using the custom server provided in the attachment. To run the server it is needed Node.js. After starting the server, connect to it using the following settings:
Protocol: SFTP
Port number: 22
Username: demo
The server does not have a password
WinSCP version: 5.19
OS version: Windows 10 Education x64
Run a local or remote server using the custom server provided in the attachment. To run the server it is needed Node.js. After starting the server, connect to it using the following settings:
Protocol: SFTP
Port number: 22
Username: demo
The server does not have a password
WinSCP version: 5.19
OS version: Windows 10 Education x64