Description (CNA)
Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command containing 247 bytes of padding followed by a return address and shellcode to trigger code execution on the FTP server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Freefloat / Free Float FTP | affected 1.0 |
CWE
CWE-787
References
- https://www.exploit-db.com/exploits/46763
- http://www.freefloat.com/software/freefloatftpserver.zip
- https://www.vulncheck.com/advisories/free-float-ftp-stor-command-remote-buffer-overflow
ADP enrichment
No English description supplied.
No references supplied.