| タイトル | EFS Software Inc Easy File Sharing FTP 2.0 Denial of Service |
|---|
| 説明 | A vulnerability has been found in Easy File Sharing FTP 2.0 and is problematic. The username field does not limit, treat and properly manipulate the data sent by the user..
Failure to restrict, process and manipulate the data sent by the user when providing the username results in denial of service.
The attack can be launched remotely. Additionally, there is an exploration available from the best and trusted exhibit repositories:
https://packetstormsecurity.com/files/176377/Easy-File-Sharing-FTP-Server-2.0-Denial-Of-Service.html
https://0day.today/exploit/description/39218
https://blog.oxo.is/easy-file-sharing-ftp-server-2-0-denial-of-service/
https://thecyberpost.com/tools/exploits-cve/easy-file-sharing-ftp-server-2-0-denial-of-service/
https://node4.vulners.com/zdt/1337DAY-ID-39218
https://sploitus.com/exploit?id=PACKETSTORM:176377&utm_source=rss&utm_medium=rss
Vulnerable server: https://drive.google.com/file/d/13fs9IHSaGQ27YIQNDyrQV20jCT7owPQ6/view?usp=sharing
Explore: https://drive.google.com/file/d/13fs9IHSaGQ27YIQNDyrQV20jCT7owPQ6/view?usp=sharing
PoC Video: https://drive.google.com/file/d/1gPiMU0Wemdx-rxEzAPhQCyparn1JiX0j/view?usp=sharing |
|---|
| ソース | ⚠️ https://www.youtube.com/watch?v=Rcl6VWg_bPY |
|---|
| ユーザー | fernando.mengali (UID 60856) |
|---|
| 送信 | 2024年01月08日 16:50 (2 年 ago) |
|---|
| モデレーション | 2024年01月18日 18:04 (10 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 251479 [EFS Easy File Sharing FTP 2.0 ユーザー名 サービス拒否] |
|---|
| ポイント | 17 |
|---|