| Título | EzServer EzServer 6.4.017 Denial of Service |
|---|
| Descripción | His technique works fine against Windows XP Professional Service Pack 2 and 3 (English).
For this exploit I have tried several strategies to increase reliability and performance:
Jump to a static 'call esp'
Backwards jump to code a known distance from the stack pointer.
The FTP server does not correctly handle the amount of data or bytes sent to command RNTO.
When authenticating to the FTP server with a large number of characters for the server to process, the server will crash as soon as it is received and processed, causing Denied of service onditions.
#Successful exploitation of these issues allows remote attackers to crash the affected server, denying service to legitimate users. |
|---|
| Fuente | ⚠️ https://packetstormsecurity.com/files/176663/EzServer-6.4.017-Denial-Of-Service.html |
|---|
| Usuario | fernando.mengali (UID 60856) |
|---|
| Sumisión | 2024-01-22 20:48 (hace 2 años) |
|---|
| Moderación | 2024-01-25 15:14 (3 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 252014 [EzServer 6.4.017 Daemon denegación de servicio] |
|---|
| Puntos | 0 |
|---|