Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-6829.
PoCs published by Alfons Luja, including Metasploit module auxiliary/dos/windows/ftp/vicftps50_list.
AI-analyzed exploit summary This exploit targets vicFTPS v5.0 by sending a malformed LIST command to trigger a remote denial-of-service (DoS). It establishes an FTP connection, logs in anonymously, and sends a crafted payload to crash the server.
Description
VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a "/\/" (forward slash, backward slash, forward slash). NOTE: this might be the same issue as CVE-2008-2031.
Exploits (2)
This exploit targets vicFTPS v5.0 by sending a malformed LIST command to trigger a remote denial-of-service (DoS). It establishes an FTP connection, logs in anonymously, and sends a crafted payload to crash the server.
This Metasploit module exploits a denial-of-service vulnerability in Victory FTP Server 5.0 by sending a malformed LIST command with specific bytes (0x2f, 0x5c). The exploit requires valid FTP credentials and crashes the service upon execution.