Exploitation Summary
EIP tracks 3 public exploits for CVE-2003-0831. PoCs published by Haggis, bkbll, netris.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in ProFTPD 1.2.7 to 1.2.9rc2, leveraging a brute-force approach to overwrite the return address and execute shellcode that binds a shell to port 4660. It includes chroot breaking and requires anonymous or valid FTP credentials.
Description
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.
Exploits (3)
This exploit targets a stack-based buffer overflow in ProFTPD 1.2.7 to 1.2.9rc2, leveraging a brute-force approach to overwrite the return address and execute shellcode that binds a shell to port 4660. It includes chroot breaking and requires anonymous or valid FTP credentials.
This exploit targets a buffer overflow vulnerability in ProFTPD 1.2.7/1.2.9rc2 via the _xlate_ascii_write function. It includes shellcode for both bind and connect-back shells, demonstrating remote code execution (RCE) by overflowing the return address.
This exploit targets a buffer overflow vulnerability in ProFTPD versions 1.2.7 to 1.2.8. It leverages a malformed file upload followed by a download in ASCII mode to execute arbitrary code in the context of the FTP server.