Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4048.
AI-analyzed exploit summary The exploit demonstrates a denial-of-service (DoS) vulnerability in XM Easy Personal FTP Server 5.8.0 by creating over 2000 directories, which crashes the server upon reconnection and directory listing. The Python script automates the creation of directories to trigger the vulnerability.
Description
Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (daemon outage) via an APPE command to one socket in conjunction with a DELE command to a second socket.
Exploits (2)
The exploit demonstrates a denial-of-service (DoS) vulnerability in XM Easy Personal FTP Server 5.8.0 by creating over 2000 directories, which crashes the server upon reconnection and directory listing. The Python script automates the creation of directories to trigger the vulnerability.
This exploit targets CVE-2009-4048, a vulnerability in Pure-FTPd. It leverages a race condition between the APPE and DELE commands to trigger a denial-of-service (DoS) condition. The script establishes an FTP connection, sends crafted commands, and binds to a local port to exploit the flaw.