Description
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- IBM AIX 5l - 'FTPd' Remote DES Hash EDB-14456 · remote · Jul 24, 2010 · verified
- AIX5l with FTP-Server - Hash Disclosure EDB-14409 · remote · Jul 18, 2010 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 1024368 vdb-entry
- IZ83276 vendor-advisory
- oval:org.mitre.oval:def:11697 vdb-entry signature
- 14456 exploit
- 14409 exploit
- 66576 vdb-entry
- IZ83274 vendor-advisory
- IZ83252 vendor-advisory
- IZ83275 vendor-advisory
- 20100723 Advanced AIX 5l FTPd Exploit mailing-list
- 20100723 Advanced AIX 5l FTPd Exploit V2.0 mailing-list
- http://aix.software.ibm.com/aix/efixes/security/ftpd_advisory.asc
- 20100718 --== ~ AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT ~ =-- mailing-list
- 20100722 Re: --== ~ AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT ~ =-- mailing-list