← Advisories

Femitter FTP Server 1.03 (RETR) Remote Denial of Service Exploit PoC

High
Advisory ID
ZSL-2008-4898
Release Date
17 September 2008
Vendor
Acritum Software - http://www.acritum.com
Affected Version
1.03
Tested On
Microsoft Windows XP Professional SP2 (English)
Summary

Femitter Server is an easy-to use HTTP and FTP server application for Windows which allows you to use your own computer for sharing gigabytes of files with your friends and colleagues.

Description

Femitter HTTP/FTP 1.03 suffers from an information disclosure and denial of service vulnerability that causes the application to crash. When we send to the RETR command an argument like AAAA:AAAA or an overly long string of As (1024), the server crashes instantly. Also, when typing into browser: ftp://127.0.0.1/\.. we traverse to the install folder of the program(CWD), and when browsing to ftp://127.0.0.1/\..\/\..\ we get access violation at address 004A218A in module "fem.exe". Write of address 00000000.

Proof of Concept
Disclosure Timeline
N/A
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
17.09.2008Initial release
19.09.2008Added reference [6]
21.09.2008Added reference [7]
02.10.2008Added reference [8]
27.07.2010Added reference [9]
25.10.2021Added reference [10], [11] and [12]