大西瓜的杂货铺

FROM:exploit-db

# Title: Core FTP Server 1.0 Build 319 Denial of Service
# EDB-ID: 10303
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Mert SARICA
# Published: 2009-12-04
# Verified: yes
# Download Exploit Code
# Download Vulnerable app
# Note: FTP account is not required for exploitation
# http://www.mertsarica.com
# I discovered a denial-of-service vulnerability on Core FTP Server product.
# When you send “USER test\r\n” and then kills the connection
# immediately, cpu increases to 100% and stays at that level until you
# stop the ftp service.

阅读全文

***** MS IIS FTPD DoS ZER0DAY *****

There is a DoS vulnerability in the globbing functionality of IIS FTPD.
Anonymous users can exploit this if they have read access to a directory!!!
Normal users can exploit this too if they can read a directory.

Example session where the anonymous user has read access to the folder "pub":

C:\Users\Nikolaos>ftp 192.168.2.102
Verbindung mit 192.168.2.102 wurde hergestellt. 
阅读全文

From:空虚浪子

看了墨西哥同学（其实看不懂，刺帮忙翻译的）和刺的文章，不过我们主要关心该技术的利用。

sirdarckcat说，HTTP头的长度，在APACHE等web服务器是有一定的要求的，如果超出一定长度，会产生服务器错误。HTTP头里面，有cookie，有location，有host。。。如果我们可以控制其中一个（例如cookie），给用户植入大长度的cookie，就会出现用户访问该域下所有的请求，都带上大长度cookie，导致用户不管访问域名下的哪个文件，都会产生服务器错误，造成客户端无法访问。

HTTP头有很多字段，为什么非要提COOKIE插入大字段呢？

阅读全文