Rule:--Sid:1734--Summary:This event is generated when an attempt is made to exploit a bufferoverflow or denial of service vulnerability associated with FTP USER command. --Impact:Remote access or denial of service.  A successful attack can cause adenial of service or allow remote execution of arbitrary commands withprivileges of the process running the FTP server. --Detailed Information:This event is generated when an attempt is made to exploit variousvulnerabilities associated with the FTP USER command of different FTPservers. It is possible to cause a denial of service attack or gainremote access to execute arbitrary commands with the privileges of theprocess running the FTP server by sending an overly long argument withthe FTP USER command. --Affected Systems:	bftpd 1.0.11.	BlackMoon FTP Server 1.0 through 1.5. 	CesarFTPD 0.98b. 	A-FTP Anonymous FTP Server.	Argosoft FRP server 1.0.	TYPSoft FTP Server 0.78. 	AnalogX proxy server 4.04 and earlier 	Dragon FTP server.--Attack Scenarios:An attacker can supply an overly long file argument with the USERcommand, causing a denial of service or buffer overflow.--Ease of Attack:Simple.  --False Positives:None Known.--False Negatives:None Known.--Corrective Action:Upgrade to the latest non-affected version of the software.--Contributors:Sourcefire Vulnerability Research TeamBrian Caswell <bmc@sourcefire.com> Nigel Houghton <nigel.houghton@sourcefire.com>Judy Novak <judy.novak@sourcefire.com>--Additional References:--