CVE-2011-10029
HIGHSolar FTP Server < 2.1.1 - Denial of Service via USER Command Format String
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-10029.
PoCs published by x000, including Metasploit module auxiliary/dos/windows/ftp/solarftp_user.
AI-analyzed exploit summary This Perl script exploits a Denial of Service (DoS) vulnerability in Solar FTP Server 2.1 by sending a malformed USER command with a buffer overflow payload. The exploit checks for the presence of the vulnerable server before sending the payload.
Description
Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.
Exploits (2)
This Perl script exploits a Denial of Service (DoS) vulnerability in Solar FTP Server 2.1 by sending a malformed USER command with a buffer overflow payload. The exploit checks for the presence of the vulnerable server before sending the payload.
This Metasploit module exploits a format string vulnerability in Solar FTP Server by sending a malformed USER command, causing a denial of service (DoS) via a READ violation in the '__output_1()' function.
References (5)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N