DoS due to GNU globbing functions

[Rob klein Gunnewiek]

Hello,

I discovered a DoS vulnerability in ProFTPd 1.2.5 and 1.2.7rc3 which use
the GLIBC globbing functions.
TJ Saunders pointed out to me that the DoS vulnerability was caused by the
globbing functions in GLIBC used by ProFTPD, which makes this
vulnerability likely to exist in other software as well.

The method used was:

STAT /*/*/*/*/*/*/*
or
LIST /*/*/*/*/*/*/*

Note: this method seems to be different than:

LIST ../*/../*/../*/../*

and the like vulnerabilities reported awhile ago.

I have only tested this against slackware 8.1 default install + proftpd
v1.2.4 and 1.2.7rc3.

Rob.