automatic module_metadata_base.json update

Author: msjenkins-r7

db/modules_metadata_base.json

@@ -123125,7 +123125,7 @@
     "needs_cleanup": null
   },
   "exploit_windows/ftp/sami_ftpd_user": {
-    "name": "KarjaSoft Sami FTP Server v2.02 USER Overflow",
+    "name": "KarjaSoft Sami FTP Server v2.0.2 USER Overflow",
     "fullname": "exploit/windows/ftp/sami_ftpd_user",
     "aliases": [
 
@@ -123134,9 +123134,13 @@
     "disclosure_date": "2006-01-24",
     "type": "exploit",
     "author": [
-      "aushack <[email protected]>"
+      "Muhammad Ahmed Siddiqui",
+      "Critical Security",
+      "n30m1nd",
+      "aushack <[email protected]>",
+      "bcoles <[email protected]>"
     ],
-    "description": "This module exploits the KarjaSoft Sami FTP Server version 2.02\n        by sending an excessively long USER string. The stack is overwritten\n        when the administrator attempts to view the FTP logs. Therefore, this exploit\n        is passive and requires end-user interaction. Keep this in mind when selecting\n        payloads. When the server is restarted, it will re-execute the exploit until\n        the logfile is manually deleted via the file system.",
+    "description": "This module exploits an unauthenticated stack buffer overflow in\n          KarjaSoft Sami FTP Server version 2.0.2 by sending an overly long\n          USER string during login.\n\n          The payload is triggered when the administrator opens the application\n          GUI. If the GUI window is open at the time of exploitation, the\n          payload will be executed immediately. Keep this in mind when selecting\n          payloads. The application will crash following execution of the\n          payload and will not restart automatically.\n\n          When the application is restarted, it will re-execute the payload\n          unless the payload has been manually removed from the SamiFTP.binlog\n          log file.\n\n          This module has been tested successfully on Sami FTP Server versions:\n          2.0.2 on Windows XP SP0 (x86);\n          2.0.2 on Windows 7 SP1 (x86);\n          2.0.2 on Windows 7 SP1 (x64); and\n          2.0.2 on Windows 10 (1909) (x64).",
     "references": [
       "CVE-2006-0441",
       "CVE-2006-2212",
@@ -123148,7 +123152,8 @@
       "EDB-1452",
       "EDB-1462",
       "EDB-3127",
-      "EDB-3140"
+      "EDB-3140",
+      "EDB-40675"
     ],
     "platform": "Windows",
     "arch": "x86",
@@ -123160,20 +123165,19 @@
 
     ],
     "targets": [
-      "Automatic",
-      "Windows 2000 Pro All - English",
-      "Windows 2000 Pro All - Italian",
-      "Windows 2000 Pro All - French",
-      "Windows XP SP0/1 - English"
+      "Sami FTP Server version 2.0.2"
     ],
-    "mod_time": "2020-10-02 17:38:06 +0000",
+    "mod_time": "2021-02-25 20:53:30 +0000",
     "path": "/modules/exploits/windows/ftp/sami_ftpd_user.rb",
     "is_install_path": true,
     "ref_name": "windows/ftp/sami_ftpd_user",
     "check": true,
     "post_auth": false,
     "default_credential": false,
     "notes": {
+      "Stability": [
+        "crash-service-down"
+      ]
     },
     "needs_cleanup": null
   },