Exploitation Summary
EIP tracks 4 public exploits for CVE-2008-5626.
PoCs published by Jonathan Salwan, shinnai, including Metasploit module auxiliary/dos/windows/ftp/xmeasy560_nlst.
AI-analyzed exploit summary This exploit demonstrates a Denial of Service (DoS) vulnerability in XM Easy Personal FTP Server <= 5.7.0 by sending an NLST command with a NULL argument, causing the FTP service to crash.
Description
XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument.
Exploits (4)
This exploit demonstrates a Denial of Service (DoS) vulnerability in XM Easy Personal FTP Server <= 5.7.0 by sending an NLST command with a NULL argument, causing the FTP service to crash.
This exploit demonstrates a remote denial of service (DoS) vulnerability in XM Easy Personal FTP Server 5.6.0 by sending a malformed NLST command. The PoC connects to the FTP server, authenticates with arbitrary credentials, and triggers the crash by sending 'NLST -1'.
This Metasploit module exploits a denial-of-service (DoS) vulnerability in XM Easy Personal FTP Server 5.6.0 by sending a malformed NLST command. The exploit requires valid FTP credentials but can work with anonymous access if permitted.
This Metasploit module exploits a denial-of-service (DoS) vulnerability in XM Easy Personal FTP Server 5.7.0 by sending a malformed NLST command after authentication. The server crashes or becomes unresponsive upon receiving the command.