CVE-2011-0762 VSFTPD DOS attack #18004
Conversation
space-r7
added
the
needs-linting
|
Thanks for your pull request! Before this pull request can be merged, it must pass the checks of our automated linting tools. We use Rubocop and msftidy to ensure the quality of our code. This can be ran from the root directory of Metasploit: You can automate most of these changes with the Please update your branch after these have been made, and reach out if you have any problems. |
|
So I've tested the module and it works now. So is anything missing for merging? |
|
If anyone is wanting to test this easily. Heres a dockerfile to make an image of the application data FROM archlinux:latest as build
RUN pacman -Sy --noconfirm gcc make libnsl
RUN curl -O https://security.appspot.com/downloads/vsftpd-2.3.2.tar.gz
RUN tar zxf vsftpd-2.3.2.tar.gz
WORKDIR /vsftpd-2.3.2
RUN make
RUN mkdir -p /usr/share/empty/
RUN chmod +x /vsftpd-2.3.2/vsftpd
RUN mv /vsftpd-2.3.2/vsftpd /bin/vsftpd
RUN mv /vsftpd-2.3.2/vsftpd.conf /etc/vsftpd.conf
RUN chown root:root /etc/vsftpd.conf
EXPOSE 21
CMD [ "/bin/vsftpd" ] |
Thank you for this! I just got this working and was just about to suggest adding similar steps to the vulnerable application section in the documentation. I'll add a suggestion to the docs with this dockerfile, very nice and concise. |
|
Anything left before were ready to launch? |
One last nit pick @rad10 - I know msf_tidy doesn't pick this up as being incorrect and there are multiple different ways of listing module options in the codebase. However we're moving towards the following pattern: Where each module option is a subtitle of |
|
Final testing with latest changes: |
jheysel-r7
added
rn-modules
Release NotesThis PR adds an auxiliary for DOSing a VSFTPD server from version 2.3.2 and below. |
Vulnerable Application
This is an auxiliary for DOSing a VSFTPD server from version 2.3.3 and below.
Verification Steps
msfconsoleuse auxiliary/dos/ftp/vstfpd_232set rhostsset ftpuserset ftppassrunScenarios
VSFTPD 2.3.2 - Arch linux