CVE-2005-3294
Typsoft FTP Server < 1.11 - Denial of Service via Multiple RETR Commands
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-3294. PoCs published by emgent, Jeremiah Talamantes, wood.
AI-analyzed exploit summary This exploit triggers a denial of service in TYPSoft FTP Server v1.10 by sending malformed RETR commands. It establishes an FTP connection, logs in with test credentials, and sends two RETR commands with a single 'A' character as the argument, causing the server to crash.
Description
Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected.
Exploits (3)
This exploit triggers a denial of service in TYPSoft FTP Server v1.10 by sending malformed RETR commands. It establishes an FTP connection, logs in with test credentials, and sends two RETR commands with a single 'A' character as the argument, causing the server to crash.
This exploit targets a denial-of-service (DoS) vulnerability in TYPSoft FTP Server 1.10 by sending a malformed RETR command with an oversized buffer. The exploit repeatedly connects to the FTP server and sends the payload, causing the service to crash.
This Perl script exploits a denial-of-service (DoS) vulnerability in TYPSoft FTP Server v1.11 by sending malformed RETR commands after authentication. The exploit establishes a TCP connection, logs in with provided credentials, and sends crafted RETR commands to trigger the crash.