##
# $Id: ms09_053_ftpd_nlst.rb 10558 2010-10-05 23:39:14Z jduck $
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
	Rank = GreatRanking

	include Msf::Exploit::Remote::Ftp

	def initialize(info = {})
		super(update_info(info,
			'Name'           => 'Microsoft IIS FTP Server NLST Response Overflow',
			'Description'    => %q{
					This module exploits a stack buffer overflow flaw in the Microsoft IIS FTP
				service. The flaw is triggered when a special NLST argument is passed
				while the session has changed into a long directory path. For this exploit
				to work, the FTP server must be configured to allow write access to the
				file system (either anonymously or in conjunction with a real account)
			},
			'Author'         => [ 'Kingcope <kcope2[at]googlemail.com>', 'hdm' ],
			'License'        => MSF_LICENSE,
			'Version'        => '$Revision: 10558