I try this on my box and it allways get crashed how i can stop it ?
help

Update To 5.0

agree with AlessandroIT

No way, use Serv-U 5.0 !!!

whats this servu 3/4 exploit?

im pretty sure you have login with an account before you can exploit so if the person cant login they cant exploit it....

The problem with 5.0 is that u need a different key for each PC of a LAN :/

Use io

Explain

if you search a key for the 5.0 .. you will notice there is a Corp key now and 5.0 doesnt need to be registered ever again .

everybody say this...
use the serv-u 5.0 u can download it at: www.download.com
and if u need key for that PM me i send u

serv-u 5.0 is exploitable as well!!!
as far as i know there is no exploit for serv-u 2.5e

/* ex_servu.c - Serv-U FTPD 3.x/4.x/5.x "MDTM" Command remote overflow exploit
*
* Copyright © SST 2004 All rights reserved.
*
* private
*
* BUG find by bkbll (bkbll@cnhonker.com), cool! :ppPPppPPPpp
*
* code by Sam and 2004/01/07
* <chen_xiaobo@venustech.com.cn>
* <Sam@0x557.org>
*
*
* Revise History:
* 2004/01/14 add rebind shellcode :> we can bind shellport at ftpd port.
* 2004/01/09 connect back shellcode added
* 2004/01/08 21:04 upgrade now , we put shellcode in file parameter
* we can attack pacthed serv-U ;PPPp by airsupply
* 2004/01/08 change shellcode working on serv-u 4.0/4.1/4.2 now
* thx airsupply
*

mmm u can do "space" an the login
ex. da da:da da@123.123.123.123:122

good luck

Version 5.0.0.4 is not exploitable anymore

So upgrade

And I've read something about a very long login message... maybe that works.

disable mdtm command

u can set a very long welcome msg in servu like that guy sayed
then the exploit gets no where, try to do the welcome msg with colors it may help

one way to block the exploit is dont give anyone an account .. fill everything yourself .. The newer servu gets the lamer it is too use seems to get more " anti abuse " features such as multiple instances of it running key validation mdgay hashes servu blows best way to avoid the exploit is not too use it simplist aswell.. Check out slimftpd simplistic enough to use