CVE-2001-0053

This exploit targets a buffer overflow vulnerability in OpenBSD FTP servers (versions 2.6 and 2.7) to achieve remote code execution. It uses a crafted directory name to overflow the buffer and execute shellcode, providing either a remote shell or local command execution.

The writeup describes a one-byte overflow vulnerability in the replydirname() function of BSD-derived FTP daemons, allowing attackers to manipulate the saved base pointer and potentially execute arbitrary code as root. Exploitation requires a writable directory accessible via anonymous FTP.