Exploitation Summary
EIP tracks 3 public exploits for CVE-2004-0695.
PoCs published by Metasploit, ddz, ddz, hdm, including Metasploit module exploits/osx/ftp/webstar_ftp_user.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the WebSTAR FTP server's logging routine, achieving remote code execution via a series of hops through the System library. It leverages a crafted USER command to overflow the buffer and execute payloads on Mac OS X 10.3.4-10.3.6.
Description
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.
Exploits (3)
This exploit targets a stack buffer overflow in the WebSTAR FTP server's logging routine, achieving remote code execution via a series of hops through the System library. It leverages a crafted USER command to overflow the buffer and execute payloads on Mac OS X 10.3.4-10.3.6.
This exploit targets a stack overflow in the WebSTAR FTP server's logging routine, achieving reliable code execution via a series of hops through the System library. It leverages a buffer overflow in the USER command to execute arbitrary payloads on vulnerable Mac OS X systems.
This Metasploit module exploits a stack buffer overflow in WebSTAR FTP server's logging routine via a crafted USER command. It achieves reliable code execution on Mac OS X 10.3.4-10.3.6 by chaining multiple return addresses in the System library.