CVE-2000-0973

This exploit targets a buffer overflow vulnerability in cURL versions 6.1 to 7.4, where a malicious FTP server response can overwrite the return address on the stack, leading to arbitrary code execution. The shellcode writes a message to a file as a proof of concept.

This exploit targets a buffer overflow vulnerability in cURL versions included with Debian GNU/Linux 2.2 and FreeBSD prior to 4.2. It crafts a malicious FTP server response to overwrite the return address on the stack, leading to arbitrary code execution on the client host.