Vulnerability Development mailing list archives

Re: iis (ftp) 4.0


From: Juliano Rizzo <julianorizzo () CIUDAD COM AR>
Date: Tue, 1 Aug 2000 02:01:22 -0300

ftp> quote cd
%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f
%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f
421 Service not available, remote server has closed connection
ftp>

A lot of ftp clients have the user supplied format string bug in the
QUOTE command. You should use telnet, netcat or any other
client to test this kind of bugs
Btw the ftp server command to change current directory is CWD
not CD, cd is a client command and you are using quote.


I tought it was very weird and also I couldnt state if the ftpd really
coredump.. but I know it stays at least up because I can reconnect to

Are you sure that you can't reconnect?

the host. I have a theory that it core-dumps because of the client, and not
because of the server itself...

Yes, the client crash.

--
Juliano Rizzo <julianorizzo () ciudad com ar>

[Llave PGP disponible en servidores]
PGP DH/DSS 1024/2048 Fingerprint:
0739 CA21 677F E847 4D8C  720D E5C1 2329 0344 3CD6


Current thread: