CVE-2001-0136
ProFTPd 1.2.0rc2 - Denial of Service via USER Command Memory Leak
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2001-0136. PoCs published by JeT-Li, Piotr Zurawski.
AI-analyzed exploit summary This Java-based exploit targets a denial-of-service (DoS) vulnerability in ProFTPd by flooding the server with excessive USER or SIZE commands, leading to memory leakage and potential system crash.
Description
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.
Exploits (3)
This Java-based exploit targets a denial-of-service (DoS) vulnerability in ProFTPd by flooding the server with excessive USER or SIZE commands, leading to memory leakage and potential system crash.
This exploit demonstrates a memory leakage vulnerability in ProFTPD 1.2.0rc2 by sending a large number of SIZE commands after logging in as an anonymous user, causing excessive memory consumption. The code establishes a TCP connection, authenticates, and then floods the server with SIZE requests to trigger the DoS condition.
This Java-based exploit targets a memory leak vulnerability in ProFTPd by repeatedly sending either USER or SIZE commands to exhaust system memory, leading to a denial of service. It provides interactive options for attack intensity and supports both authenticated and unauthenticated modes.