CVE-2002-0895

MatuFtpServer 1.1.3 - Buffer Overflow via Long PASS Command

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0895. PoCs published by Kanatoko.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Matu FTP Server 1.13, allowing remote code execution via a crafted PASS command. The PoC uses a NOP sled and shellcode to trigger the overflow and execute arbitrary code.

Description

Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kanatoko · perlremotewindows

https://www.exploit-db.com/exploits/21468

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Matu FTP Server 1.13, allowing remote code execution via a crafted PASS command. The PoC uses a NOP sled and shellcode to trigger the overflow and execute arbitrary code.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Matu FTP Server 1.13

No auth needed

Prerequisites: Network access to the target FTP server · Target running Matu FTP Server 1.13 on Windows 98

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/4792

Vendor Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/9138.php

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://online.securityfocus.com/archive/1/273581

Scores

EPSS 0.0559

EPSS Percentile 91.9%

Details

Status published

Products (1)

matu/matu_ftp 1.13

Published Oct 04, 2002

Tracked Since Feb 18, 2026