CVE-2010-3187

This exploit targets a buffer overflow vulnerability in IBM AIX FTPd (CVE-2010-3187) by sending an overly long NLST/LIST command to trigger a crash and generate a core dump. The core dump is then retrieved to extract DES password hashes for offline cracking.

This exploit targets a vulnerability in IBM AIX FTP server to trigger a core dump containing the root user hash from /etc/security/passwd. It uses a buffer overflow in the NLST command to crash the FTP server and retrieve the core file.