Skip to content

Commit 3c916c3

Browse files
committed
bcoles comments from rapid7#7334
1 parent 55f56a5 commit 3c916c3

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

modules/auxiliary/scanner/ftp/colorado_ftp_traversal.rb

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,8 @@ def initialize(info = {})
2828
'References' =>
2929
[
3030
[ 'EDB', '40231'],
31-
[ 'URL', 'https://bitbucket.org/nolife/coloradoftp/commits/16a60c4a74ef477cd8c16ca82442eaab2fbe8c86']
31+
[ 'URL', 'https://bitbucket.org/nolife/coloradoftp/commits/16a60c4a74ef477cd8c16ca82442eaab2fbe8c86'],
32+
[ 'URL', 'http://www.securityfocus.com/archive/1/539186']
3233
],
3334
'DisclosureDate' => 'Aug 11 2016'
3435
))
@@ -47,7 +48,7 @@ def check_host(ip)
4748
begin
4849
connect
4950
if /Welcome to ColoradoFTP - the open source FTP server \(www\.coldcore\.com\)/i === banner
50-
return Exploit::CheckCode::Appears
51+
return Exploit::CheckCode::Detected
5152
end
5253
ensure
5354
disconnect
@@ -58,7 +59,8 @@ def check_host(ip)
5859

5960
def run_host(ip)
6061
begin
61-
connect_login
62+
c = connect_login
63+
return unless c
6264
sock = data_connect
6365

6466
# additional check per https://github.com/bwatters-r7/metasploit-framework/blob/b44568dd85759a1aa2160a9d41397f2edc30d16f/modules/auxiliary/scanner/ftp/bison_ftp_traversal.rb

0 commit comments

Comments
 (0)