Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-1625.
PoCs published by Spencer McIntyre, including Metasploit module auxiliary/scanner/http/titan_ftp_admin_pwd.
AI-analyzed exploit summary This Metasploit module exploits an information disclosure vulnerability in Titan FTP servers prior to version 9.14.1628. By sending a malformed XML request with fake authentication, the server responds with legitimate administrative credentials, allowing full control over the FTP service.
Description
On Titan FTP servers prior to version 9.14.1628, an attacker can retrieve the username and password for the administrative XML-RPC interface, which listens on TCP Port 31001 by default, by sending an XML request containing bogus authentication information. After sending this request, the server responds with the legitimate username and password for the service. With this information, an attacker has complete control over the FTP service, which includes the ability to add and remove FTP users, as well as add, remove, and modify available directories and their permissions.
Exploits (1)
This Metasploit module exploits an information disclosure vulnerability in Titan FTP servers prior to version 9.14.1628. By sending a malformed XML request with fake authentication, the server responds with legitimate administrative credentials, allowing full control over the FTP service.