CVE-2019-18217 PoC — ProFTPD 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2019/CVE-2019-18217.yaml

Associated Vulnerability

Title:ProFTPD 安全漏洞 (CVE-2019-18217)
Description:ProFTPD是ProFTPD团队的一套安全云打印解决方案。该方案支持从笔记本电脑、台式机和移动设备连接打印机进行打印。 ProFTPD 1.3.6b之前版本和1.3.7rc2之前的1.3.7rc版本中存在安全漏洞，该漏洞源于程序没有正确处理过长的命令。攻击者可利用该漏洞造成拒绝服务。

Description

ProFTPD versions before 1.3.6b and various pre-release versions (1.3.7rc before 1.3.7rc2) are vulnerable to remote unauthenticated denial of service. The vulnerability occurs when processing overly long commands, causing an infinite loop in a child process that can crash the server.

File Snapshot


 id: CVE-2019-18217

info:
  name: ProFTPD < 1.3.6b - Remote Unauthenticated DoS
  author: pussycat0x

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!