Vulnerability Development mailing list archives

Re: Microsoft FTP Program


From: "Eric D. Williams" <eric () INFOBRO COM>
Date: Fri, 23 Mar 2001 17:46:22 -0500

But again there are also differences with the older version ftp.exe in NT:

3.51

WSOCK32.dll
USER32.dll
CRTDLL.dll
ADVAPI32.dll
KERNEL32.dll
NTDLL.DLL

4.0

WSOCK32.dll
ws2_32.DLL
MSWSOCK.DLL
USER32.dll
MSVCRT.dll
ADVAPI32.dll
KERNEL32.dll
NTDLL.DLL

for starters.  BTW, I could not reporduce the format string crash you got
(SteeLe) on either platform.

On 3.51 with 3.51 Client::
C:\>ftp localhost
Connected to server.
220 server Windows NT FTP Server (Version 3.51).
User (black.infobro.com:(none)): ftp
331 Anonymous access allowed, send identity (e-mail name) as password.
Password:
230 Anonymous user logged in as ftp (guest access).
ftp> quote
(command line to send)
usage: quote line-to-send
ftp> quote 0x%x.0x%x.0x%x.0x%x.0x%x.0x%x.0x%x.0x%x
500
'0x1458912.0x14579a8.0x0.0x78257830.0x2578302e.0x78302e78.0x302e7825.0x2e782
578': command not understood
ftp> quote %s
500 '': command not understood
ftp> quote %n
500 '': command not understood
ftp> quit
221 Bye!
-----
Client - ftp.exe ::
\winnt35\system32>strings ftp.exe

VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
Microsoft Corporation
FileDescription
File Transfer Program
FileVersion
3.51
InternalName
ftp.exe
LegalCopyright
Copyright
 Microsoft Corp. 1981-1995
OriginalFilename
ftp.exe
ProductName
Microsoft
 Windows NT(TM) Operating System
ProductVersion
3.51
VarFileInfo
Translation


Eric Williams, Pres.
Information Brokers, Inc.    Phone: +1 202.889.4395
http://www.infobro.com/        Fax: +1 202.889.4396
               mailto:eric () infobro com
           For More Info: info () infobro com
                    PGP Public Key
   http://new.infobro.com/KeyServ/EricDWilliams.asc
Finger Print: 1055 8AED 9783 2378 73EF  7B19 0544 A590 FF65 B789


On Friday, March 23, 2001 9:02 AM, Bruno Lustosa [SMTP:bruno () LUSTOSA NET]
wrote:
SteeLe [steeLe () PRIVACYX COM] wrote:
I do know that the ftp program in most linux distros had this problem a
while back but who knew it would pass on to Windows.
Might not be important but someone should comment on this :)

Nod.. I wouldn't find it THAT strange for it to pass from linux client to
windows client. If you check inside ftp.exe on a windows box, you can find
the
following string:

@(#) Copyright (c) 1983 The Regents of the University of California.

And checking the strings on /bin/ftp, you can find the following:

@(#) Copyright (c) 1985, 1989 Regents of the University of California.

Doesn't this look very very interesting? :)

--
Bruno Lustosa, aka Lofofora          | Email: bruno () lustosa net
Network Administrator/Web Programmer | ICQ UIN: 1406477
Rio de Janeiro - Brazil              |
... Linux! Guerrilla UNIX Development. Venimus, Vidimus, Dolavimus.


Current thread: