Kali Linux Network Scanning Cookbook - Second Edition

How to do it...

There is a publicly disclosed vulnerability associated with the Cesar 0.99 FTP service. This vulnerability is defined by the Common Vulnerabilities and Exposures (CVE) numbering system as CVE-2006-2961. By performing research on this vulnerability, it becomes apparent that a stack-based buffer overflow can be triggered by sending a post-authentication sequence of line-break characters to the MKD function:

1. To avoid the difficulty associated in passing the n escape sequence to the Python script and then having it properly interpreted in the supplied input, we should modify the script that was discussed in the previous recipe. We can then use the modified script to exploit this existing vulnerability, as follows:

 #!/usr/bin/python ...