| 标题 | EFS Software Inc Easy File Sharing FTP 2.0 Denial of Service |
|---|
| 描述 | A vulnerability has been found in Easy File Sharing FTP 2.0 and is problematic. The username field does not limit, treat and properly manipulate the data sent by the user..
Failure to restrict, process and manipulate the data sent by the user when providing the username results in denial of service.
The attack can be launched remotely. Additionally, there is an exploration available from the best and trusted exhibit repositories:
https://packetstormsecurity.com/files/176377/Easy-File-Sharing-FTP-Server-2.0-Denial-Of-Service.html
https://0day.today/exploit/description/39218
https://blog.oxo.is/easy-file-sharing-ftp-server-2-0-denial-of-service/
https://thecyberpost.com/tools/exploits-cve/easy-file-sharing-ftp-server-2-0-denial-of-service/
https://node4.vulners.com/zdt/1337DAY-ID-39218
https://sploitus.com/exploit?id=PACKETSTORM:176377&utm_source=rss&utm_medium=rss
Vulnerable server: https://drive.google.com/file/d/13fs9IHSaGQ27YIQNDyrQV20jCT7owPQ6/view?usp=sharing
Explore: https://drive.google.com/file/d/13fs9IHSaGQ27YIQNDyrQV20jCT7owPQ6/view?usp=sharing
PoC Video: https://drive.google.com/file/d/1gPiMU0Wemdx-rxEzAPhQCyparn1JiX0j/view?usp=sharing |
|---|
| 来源 | ⚠️ https://www.youtube.com/watch?v=Rcl6VWg_bPY |
|---|
| 用户 | fernando.mengali (UID 60856) |
|---|
| 提交 | 2024-01-08 16時50分 (3 年前) |
|---|
| 管理 | 2024-01-18 18時04分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 251479 [EFS Easy File Sharing FTP 2.0 username 拒绝服务] |
|---|
| 积分 | 17 |
|---|