{"uuid": "e6c72cec-0b2e-4e46-98d0-03aca2b30e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-2521", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/ftp/iis_list_exhaustion.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Kingcope\", \"Myo Soe\"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": false, \"default_credential\": false, \"description\": \"This module triggers Denial of Service condition in the Microsoft Internet\\n          Information Services (IIS) FTP Server 5.0 through 7.0 via a list (ls) -R command\\n          containing a wildcard. For this exploit to work in most cases, you need 1) a valid\\n          ftp account: either read-only or write-access account 2) the \\\"FTP Publishing\\\" must\\n          be configured as \\\"manual\\\" mode in startup type 3) there must be at least one\\n          directory under FTP root directory. If your provided an FTP account has write-access\\n          privilege and there is no single directory, a new directory with random name will be\\n          created prior to sending exploit payload.\", \"disclosure_date\": \"2009-09-03\", \"fullname\": \"auxiliary/dos/windows/ftp/iis_list_exhaustion\", \"is_install_path\": true, \"mod_time\": \"2025-05-13 23:28:13 +0000\", \"name\": \"Microsoft IIS FTP Server LIST Stack Exhaustion\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/windows/ftp/iis_list_exhaustion.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/windows/ftp/iis_list_exhaustion\", \"references\": [\"CVE-2009-2521\", \"BID-36273\", \"OSVDB-57753\", \"MSB-MS09-053\", \"URL-http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0040.html\"], \"rport\": 21, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:07.755728Z"}