what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

OSVDB: OSVDB-79691

Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow

Posted Mar 26, 2012

Authored by sinn3r, Julien Ahrens | Site metasploit.com

This Metasploit module exploits a vulnerability found in Ricoh DC's DL-10 SR10 FTP service. By supplying a long string of data to the USER command, it is possible to trigger a stack-based buffer overflow, which allows remote code execution under the context of the user. Please note that in order to trigger the vulnerability, the server must be configured with a log file name (by default, it's disabled).

tags | exploit, remote, overflow, code execution

advisories | OSVDB-79691

SHA-256 | 2e39652db0079e5ca51125d0179fc236f418207928058994109116189eadb542

Download | Favorite | View