Videos
Published on May 28th, 2011 📆 | 1915 Views ⚑
0ScriptFTP 3.3 Remote Buffer Overflow (LIST)
iSpeech
ScriptFTP is a FTP client designed to automate file transfers. It follows the commands written on a text file (also called script file) and makes the uploads or downloads automatically. Writing the script file is very easy, take a look at the script library.
Bug: overflow on LIST file, cannot handing long filename.
Exploit approach: Unicode SEH Based
Bug found by: modpr0be@spentera
Tested on: Windows XP SP3
Vendor status: Unpatched
Exploit: http://www.exploit-db.com/exploits/17876
Likes: 0
Viewed:
source
Gloss