KCOPE2011 - x86/amd64 bsd ftpd remote root exploit

vendor:

N/A

by:

Kingcope

9.3

CVSS

HIGH

Remote Root Exploit

N/A

CWE

Product Name: N/A

Affected Version From: FreeBSD-8.2,8.1,7.2,7.1 i386; FreeBSD-6.3 i386; FreeBSD-5.5,5.2 i386; FreeBSD-8.2 amd64; FreeBSD-7.3, 7.0 amd64; FreeBSD-6.4, 6.2 amd64.

Affected Version To: FreeBSD-8.2,8.1,7.2,7.1 i386; FreeBSD-6.3 i386; FreeBSD-5.5,5.2 i386; FreeBSD-8.2 amd64; FreeBSD-7.3, 7.0 amd64; FreeBSD-6.4, 6.2 amd64.

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: FreeBSD

2011

KCOPE2011 – x86/amd64 bsd ftpd remote root exploit

This exploit is a remote root exploit for x86/amd64 bsd ftpd. It was found by Kingcope and tested against FreeBSD-8.2,8.1,7.2,7.1 i386; FreeBSD-6.3 i386; FreeBSD-5.5,5.2 i386; FreeBSD-8.2 amd64; FreeBSD-7.3, 7.0 amd64; FreeBSD-6.4, 6.2 amd64.

Mitigation:

N/A

Source

Exploit-DB raw data:

/* KCOPE2011 - x86/amd64 bsd ftpd remote root exploit
 *
 * KINGCOPE CONFIDENTIAL - SOURCE MATERIALS
 *
 * This is unpublished proprietary source code of KINGCOPE Security.
 *
 * (C) COPYRIGHT KINGCOPE Security, 2011
 * All Rights Reserved
 *
 *****************************************************************************
 * bug found by Kingcope
 * thanks to noone except alex whose damn down
 *
 * tested against:  FreeBSD-8.2,8.1,7.2,7.1 i386;
 *					FreeBSD-6.3 i386
 *					FreeBSD-5.5,5.2 i386
 * 					FreeBSD-8.2 amd64
 * 					FreeBSD-7.3, 7.0 amd64
 *					FreeBSD-6.4, 6.2 amd64
 *
 */

I m better than TESO 7350 see attached.
I aint mad at cha
and dont forget that the scene is fucked.
and that the public scene is fucked too, kind of.
youse a down ass bitch and I aint mad at cha.
thanks lsd you are the only one NORMAL.
hear the track before you see the code:
http://www.youtube.com/watch?v=krxu9_dRUwQ
BTW my box (isowarez.de) got hacked so expect me in a zine :>

/Signed "the awesome" Kingcope

Code:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/18181.tar (7350roaringbeastv3.tar)