CVE-2010-4052

This exploit targets a denial-of-service vulnerability in GNU glibc's regex handling (CVE-2010-4052) by creating a malicious .ftpaccess file in ProFTPD. It leverages stack exhaustion via crafted regular expressions to cause CPU or memory exhaustion, leading to service disruption.

The exploit demonstrates a denial-of-service (DoS) vulnerability in GNU libc's regcomp function (CVE-2010-4051) by triggering a stack exhaustion or segmentation fault via malformed regular expressions with excessive repetition operators. The PoC code provides multiple examples of patterns that cause crashes in applications like grep, pgrep, and proftpd.