Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0766. PoCs published by Bahaa Naamneh.
AI-analyzed exploit summary This is a technical writeup describing a buffer overflow vulnerability in FTP Desktop when processing overly long 331 server responses. It outlines the exploit structure but does not include executable code.
Description
Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via (1) a long FTP banner, (2) a long response to a USER command, or (3) a long response to a PASS command.
Exploits (2)
This is a technical writeup describing a buffer overflow vulnerability in FTP Desktop when processing overly long 331 server responses. It outlines the exploit structure but does not include executable code.
This exploit demonstrates a buffer overflow in FTP Desktop when processing an overly long FTP banner (220 message). The PoC shows a crafted payload with padding, EBP, and EIP overwrites, leading to an access violation at 0x58585858.