CVE-2004-1118
WodFtpDLX ActiveX Component < 2.3.2.97 - Buffer Overflow via Long Filename
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1118. PoCs published by Komrade.
AI-analyzed exploit summary This exploit creates a fake FTP server to trigger a buffer overflow in CoffeeCup FTP clients, spawning a reverse shell on port 5555. It supports both local and remote execution, targeting specific versions of CoffeeCup Direct FTP and Free FTP.
Description
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.
Exploits (2)
This exploit creates a fake FTP server to trigger a buffer overflow in CoffeeCup FTP clients, spawning a reverse shell on port 5555. It supports both local and remote execution, targeting specific versions of CoffeeCup Direct FTP and Free FTP.
This exploit creates a fake FTP server to trigger a buffer overflow in the WodFtpDLX ActiveX Control, causing a crash by overwriting the SEH handler with 0xDEADCODE. It supports both local and remote execution.