CVE-1999-1510
Bisonware FTP Server < 4.1 - Buffer Overflow via Long USER LIST or CWD Commands
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-1999-1510.
PoCs published by SecPod Research, localh0t, Arne Vidstrom, including Metasploit module exploits/windows/ftp/bison_ftp_bof.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow vulnerability in BisonFTP Server <= v3.5. It sends a crafted payload to trigger a remote code execution via a malformed FTP command.
Description
Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.
Exploits (4)
This is a Metasploit module exploiting a buffer overflow vulnerability in BisonFTP Server <= v3.5. It sends a crafted payload to trigger a remote code execution via a malformed FTP command.
This exploit targets a buffer overflow vulnerability in BisonFTP Server <=v3.5, delivering a reverse shell payload. It uses a NOP sled and a JMP EDX instruction to redirect execution to the shellcode.
This exploit targets multiple vulnerabilities in BisonWare FTP Server 3.5, including buffer overflows in commands like USER and PASS, leading to a remote denial-of-service (DoS). It sends oversized strings to crash the server without requiring authentication.
This Metasploit module exploits a buffer overflow vulnerability in BisonWare BisonFTP Server 3.5 by sending a crafted payload to trigger remote code execution. The exploit leverages a known return address and offsets to achieve reliable exploitation.