10
CVSSv2

CVE-2008-5045

Published: 13/11/2008 Updated: 29/09/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to cause a denial of service (crash) via a 200 server response that is exactly 1024 characters long.

Vulnerable Product Search on Vulmon Subscribe to Product

network-client.com ftp now 2.6

Exploits

#!/usr/bin/perl # By DrPantagon # wwwdeltasecurityir # DeltaSecurityCenter # Special Tnx D_7J AND H!V++ # FTP Now version 26 Server Response PoC # Usage: /ftpnowpl [IP] # Download Link : wwwnetwork-clientcom/ftpnow/FTPNow26exe # # Details: The response is broken into buffers, either at length 1024, # or at '\r\n' E ...