Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0368. PoCs published by jamez & c0nd0r, smiler & cossack.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in ProFTPD and wu-ftpd due to improper bounds checking in the 'realpath' function. It allows remote code execution by creating an unusually long pathname to overwrite the stack and execute arbitrary commands as root.
Description
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
Exploits (2)
This exploit targets a buffer overflow vulnerability in ProFTPD and wu-ftpd due to improper bounds checking in the 'realpath' function. It allows remote code execution by creating an unusually long pathname to overwrite the stack and execute arbitrary commands as root.
This exploit targets a buffer overflow vulnerability in ProFTPD and wu-ftpd due to improper bounds checking in the `realpath` function. It crafts a long directory path to overwrite the stack and execute arbitrary shellcode, leading to remote code execution.