[Full-disclosure] freeftpd MKD buffer overflow etc...

[barabas mutsonline <barbsie@xxxxxxxxx>]

Hi,
 I turned off logging on my freeftpd server as a temporary fix for the USER
problem. Pfew...I felt more comfortable now. 3v17 h4x0r5 won't be able to
compromise my collection of Adriana Lima pics anymore.
But...while I was thinking on how to write a l33t3r PoC, I picked my nose,
and a giant booger fell on my keyboard just whilst I was creating a daily
directory of pictures. It hit the A-key and send a long MKD string to my
freeftpd server and crashed it (7 gram booger = +- 1024 A's). Godd4mn! This
even without turning logging on! SEH was overwritten again.
I restarted the server and got really mad. Trying to remove the booger from
between my keys something amazing happened: A very long DELE command was
send and the server died again.
 I give up. Maybe I'll use scp and blow my nose?
 I'll leave it up to Class101 to write l33t PoC code. His kungfu is better
and he codes in C, which is l33t3r anyway.
 cheers
 barabas

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/