CVEs-PoC/2011/CVE-2011-10029.md

CVE-2011-10029

Description

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.

POC

Reference

• https://www.exploit-db.com/exploits/16204
• https://www.vulncheck.com/advisories/solar-ftp-server-malformed-user-dos

Github

No PoCs found on GitHub currently.