CVE-2004-0286

RobotFTP Server 1.0 and 2.0 beta 1 - Buffer Overflow via Long Username

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2004-0286. PoCs published by NoRpiuS, gsicht.

AI-analyzed exploit summary This exploit demonstrates a Denial of Service (DoS) vulnerability in RobotFTP Server versions 1.0 and 2.0 by sending a malformed 'LIST' command. The vulnerability arises from insufficient bounds checking when processing the command, causing the server to crash.

Description

Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username.

Exploits (2)

exploitdb WORKING POC VERIFIED
by NoRpiuS · cdoswindows
https://www.exploit-db.com/exploits/23709

This exploit demonstrates a Denial of Service (DoS) vulnerability in RobotFTP Server versions 1.0 and 2.0 by sending a malformed 'LIST' command. The vulnerability arises from insufficient bounds checking when processing the command, causing the server to crash.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: RobotFTP Server 1.0/2.0
No auth needed
Prerequisites: Network access to the target RobotFTP Server
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by gsicht · cdoswindows
https://www.exploit-db.com/exploits/23708

This exploit targets a buffer overflow vulnerability in RobotFTP Server by sending an excessively long 'USER' command. It crafts a malicious input to overwrite the EIP register, potentially leading to arbitrary code execution.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: RobotFTP Server
No auth needed
Prerequisites: Network access to the target RobotFTP Server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9672
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=107696194306878&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15225

Scores

EPSS 0.0809
EPSS Percentile 94.1%

Details

Status published
Products (2)
robotftp/robotftp_server 1.0
robotftp/robotftp_server 2.0_beta_1
Published Nov 23, 2004
Tracked Since Feb 18, 2026