OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Eric D. Williams (ericINFOBRO.COM)
Date: Fri Mar 23 2001 - 16:46:22 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    But again there are also differences with the older version ftp.exe in NT:

    3.51

    WSOCK32.dll
    USER32.dll
    CRTDLL.dll
    ADVAPI32.dll
    KERNEL32.dll
    NTDLL.DLL

    4.0

    WSOCK32.dll
    ws2_32.DLL
    MSWSOCK.DLL
    USER32.dll
    MSVCRT.dll
    ADVAPI32.dll
    KERNEL32.dll
    NTDLL.DLL

    for starters. BTW, I could not reporduce the format string crash you got
    (SteeLe) on either platform.

    On 3.51 with 3.51 Client::
    C:\>ftp localhost
    Connected to server.
    220 server Windows NT FTP Server (Version 3.51).
    User (black.infobro.com:(none)): ftp
    331 Anonymous access allowed, send identity (e-mail name) as password.
    Password:
    230 Anonymous user logged in as ftp (guest access).
    ftp> quote
    (command line to send)
    usage: quote line-to-send
    ftp> quote 0x%x.0x%x.0x%x.0x%x.0x%x.0x%x.0x%x.0x%x
    500
    '0x1458912.0x14579a8.0x0.0x78257830.0x2578302e.0x78302e78.0x302e7825.0x2e782
    578': command not understood
    ftp> quote %s
    500 '': command not understood
    ftp> quote %n
    500 '': command not understood
    ftp> quit
    221 Bye!
    -----
    Client - ftp.exe ::
    \winnt35\system32>strings ftp.exe

    VS_VERSION_INFO
    StringFileInfo
    040904B0
    CompanyName
    Microsoft Corporation
    FileDescription
    File Transfer Program
    FileVersion
    3.51
    InternalName
    ftp.exe
    LegalCopyright
    Copyright
     Microsoft Corp. 1981-1995
    OriginalFilename
    ftp.exe
    ProductName
    Microsoft
     Windows NT(TM) Operating System
    ProductVersion
    3.51
    VarFileInfo
    Translation

    Eric Williams, Pres.
    Information Brokers, Inc. Phone: +1 202.889.4395
    http://www.infobro.com/ Fax: +1 202.889.4396
                   mailto:ericinfobro.com
               For More Info: infoinfobro.com
                        PGP Public Key
       http://new.infobro.com/KeyServ/EricDWilliams.asc
    Finger Print: 1055 8AED 9783 2378 73EF 7B19 0544 A590 FF65 B789

    On Friday, March 23, 2001 9:02 AM, Bruno Lustosa [SMTP:brunoLUSTOSA.NET]
    wrote:
    > SteeLe [steeLePRIVACYX.COM] wrote:
    > > I do know that the ftp program in most linux distros had this problem a
    > > while back but who knew it would pass on to Windows.
    > > Might not be important but someone should comment on this :)
    >
    > Nod.. I wouldn't find it THAT strange for it to pass from linux client to
    > windows client. If you check inside ftp.exe on a windows box, you can find
    > the
    > following string:
    >
    > (#) Copyright (c) 1983 The Regents of the University of California.
    >
    > And checking the strings on /bin/ftp, you can find the following:
    >
    > (#) Copyright (c) 1985, 1989 Regents of the University of California.
    >
    > Doesn't this look very very interesting? :)
    >
    > --
    > Bruno Lustosa, aka Lofofora | Email: brunolustosa.net
    > Network Administrator/Web Programmer | ICQ UIN: 1406477
    > Rio de Janeiro - Brazil |
    > ... Linux! Guerrilla UNIX Development. Venimus, Vidimus, Dolavimus.