There are viruses that run ftp servers that don't really implement the ftp protocol completely...

opening a connection to the port and sending \n a few times causes the following:


Escape character is '^]'. 220 "Welcome to Bot FTP service."

331 Please specify the password.

230 Login successful. Have fun.

200 Switching to Binary mode.

200 PORT command successful

150 Opening BINARY mode data connection.
226 Transfer complete.

221 Goodbye, have a good infection :).
Connection closed by foreign host.

wget segfaults when trying to wget ftp://host:port/anyfile :

write(2, "Logging in as anonymous ... ", 28Logging in as anonymous ... ) = 28
select(4, [3], NULL, NULL, {900, 0}) = 1 (in [3], left {899, 996000})
read(3, "220 \"Welcome to Bot FTP service."..., 4096) = 35
select(4, NULL, [3], NULL, {900, 0}) = 1 (out [3], left {900, 0})
write(3, "USER anonymous\r\n", 16) = 16
select(4, [3], NULL, NULL, {900, 0}) = 1 (in [3], left {900, 0})
read(3, "331 Please specify the password."..., 4096) = 34
select(4, NULL, [3], NULL, {900, 0}) = 1 (out [3], left {900, 0})
write(3, "PASS [EMAIL PROTECTED]", 13) = 13
select(4, [3], NULL, NULL, {900, 0}) = 1 (in [3], left {900, 0})
read(3, "230 Login successful. Have fun.\r"..., 4096) = 33
write(2, "Logged in!\n", 11Logged in! ) = 11
write(2, "==> SYST ... ", 13==> SYST ... ) = 13
select(4, NULL, [3], NULL, {900, 0}) = 1 (out [3], left {900, 0})
write(3, "SYST\r\n", 6) = 6
select(4, [3], NULL, NULL, {900, 0}) = 1 (in [3], left {900, 0})
read(3, "200 Switching to Binary mode.\r\n", 4096) = 31
write(2, "done. ", 9done. ) = 9
write(2, "==> PWD ... ", 12==> PWD ... ) = 12
select(4, NULL, [3], NULL, {900, 0}) = 1 (out [3], left {900, 0})
write(3, "PWD\r\n", 5) = 5
select(4, [3], NULL, NULL, {900, 0}) = 1 (in [3], left {900, 0})
read(3, "200 PORT command successful\r\n", 4096) = 29
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++


I can run it through gdb if anyone wants.

--
-- Justin Azoff
-- Network Performance Analyst

Reply via email to