full-disclosure - XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <40285455.9050205@0x557.net>
From: icbm at 0x557.net (icbm)
Subject: XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow

Vendor:
- -------

http://www.evolutionx.info

Vulnerable version:
- -------------------

Test on EvolutionX 3921 3935, maybe all version of EvolutionX

Vunlnerablity:
- --------------

EvolutionX is a Replacement of Microsoft Dashboard.It has these
Features:Build in FTP Server, Configurable Menu System, Flash BIOS utility,
Upgrade Harddisk and Format/Partition easily, Create game backups and
Build in Trainer menu system.

1.ftp 'cd' command buffer overflow:

This issue exists when 'cd' command followed with a long string
which will freeze the EvolutionX.

2.telnet 'dir' command buffer overflow:

This issue exists when 'dir' command followed with a long string
which will freeze the EvolutionX.In addition, when you type a
long sting just in command line it also cause EvolutionX freeze.

Credits:
- --------

Jokko from Evolutionx team who fast identified this shit:)
All guys on irc@...57.org.
All guys in venustech who have xbox:)You know who you are:)

About SST:
- ----------

Do we really exist?:)

- --
- -------------------------------------------------------------------------
Web page:                                                  www.0x557.org
My blog:                                             blog.0x557.org/icbm

My GPG-Key:   gpg --keyserver search.keyserver.net --recv-key 0xB527987A
Key Fingerprint:       F990 D012 689B 2B11 6504 75E3 BFCD 4521 B527 987A
- -------------------------------------------------------------------------
About SST:                                           Do we really exist?
- -------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAKFHGv81FIbUnmHoRAt1uAJoCrnWKTEntq5BaSIIWlrMtP2i+VgCghy30
FvVtiwsjKzMG5+DJ6cPmkEM=
=GkRR
-----END PGP SIGNATURE-----