| शीर्षक | Easy File Sharing FTP Server 3.x 3.x DOS |
|---|
| विवरण | # Exploit Title: Easy File Sharing FTP Server 3.6 - Denial of Service (DoS)
# Discovery by: thebugbountyhunter7
# Vendor Homepage: N/A
# Tested Version: Easy File Sharing FTP Server 3.6
# Tested on: Window XP Professional - Service Pack 2 and 3 - English
# Vulnerability Type: Denial of Service (DoS)
# Download to demo: https://drive.google.com/file/d/1ASkY1ohiVh1EwOpNCgoJ986rRxVBUp9m/view?usp=sharing
This technique is effective against Windows XP Professional Service Pack 2 and 3 (English). To improve reliability and performance, I have implemented several strategies:
Jumping to a static 'call esp' Performing a backward jump to code at a known offset from the stack pointer The FTP server does not properly manage the amount of data or the number of bytes in the password entered by the user. When a long password or an excessive number of characters is used during authentication, the server crashes upon receiving and processing the input, resulting in a denial of service.
Exploiting these issues successfully allows remote attackers to crash the server, thereby denying service to legitimate users.
|
|---|
| स्रोत | ⚠️ https://github.com/thebugbountyhunter7/Exploit-for-filesharing-DOS |
|---|
| उपयोगकर्ता | thebugbountyhunter0007 (UID 71100) |
|---|
| सबमिशन | 28/06/2024 04:37 AM (2 साल पहले) |
|---|
| संयम | 06/07/2024 11:54 AM (8 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 251479 [EFS Easy File Sharing FTP 2.0 username सेवा अस्वीकार] |
|---|
| अंक | 0 |
|---|