CVE-2006-2173 PoC — FileZilla FTP Server 多个远程缓冲区溢出漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2006/CVE-2006-2173.yaml

Associated Vulnerability

Title:FileZilla FTP Server 多个远程缓冲区溢出漏洞 (CVE-2006-2173)
Description:FileZilla FTP Server 2.2.22存在缓冲区溢出。远程攻击者可以借助一个长的(1) PORT或(2) PASS，后跟MLSD命令，或(2) 远程服务器接口，比如Infigo FTPStress Fuzzer，引起拒绝服务并可能执行任意代码。

Description

FileZilla FTP Server version 2.2.22 contains a buffer overflow vulnerability that allows remote authenticated attackers to cause denial of service and potentially execute arbitrary code. The vulnerability can be triggered by sending excessively long PORT or PASS commands followed by MLSD commands, or through the remote interface.

File Snapshot


 id: CVE-2006-2173

info:
  name: FileZilla FTP Server 2.2.22 - Buffer Overflow
  author: pussycat0x


...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!