CVE-2001-0053
BSD-based ftpd - Remote Code Execution via replydirname Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0053. PoCs published by Scrippie.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in OpenBSD FTP servers (versions 2.6 and 2.7) to achieve remote code execution. It uses a crafted directory name to overflow the buffer and execute shellcode, providing either a remote shell or local command execution.
Description
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
Exploits (2)
This exploit targets a buffer overflow vulnerability in OpenBSD FTP servers (versions 2.6 and 2.7) to achieve remote code execution. It uses a crafted directory name to overflow the buffer and execute shellcode, providing either a remote shell or local command execution.
The writeup describes a one-byte overflow vulnerability in the replydirname() function of BSD-derived FTP daemons, allowing attackers to manipulate the saved base pointer and potentially execute arbitrary code as root. Exploitation requires a writable directory accessible via anonymous FTP.