CVE-2004-1135
WS_FTP Server 5.03 2004.10.14 - Denial of Service via Long SITE, XMKD, MKD, or RNFR Commands
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-1135.
PoCs published by Metasploit, NoPh0BiA, et, including Metasploit module exploits/windows/ftp/wsftp_server_503_mkd.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in the MKD command of WS-FTP Server 5.03. It leverages a stack-based overflow to execute arbitrary payloads, with a specific return address in libeay32.dll.
Description
Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.
Exploits (3)
This is a Metasploit module exploiting a buffer overflow in the MKD command of WS-FTP Server 5.03. It leverages a stack-based overflow to execute arbitrary payloads, with a specific return address in libeay32.dll.
This exploit targets a buffer overflow vulnerability in Ipswitch WS_FTP Server. It sends a maliciously crafted MKD command with a long string to overflow the buffer, overwrite the return address, and execute shellcode to spawn a reverse shell on port 4444.
This Metasploit module exploits a buffer overflow in WS-FTP Server 5.03 via the MKD command, allowing remote code execution. It uses a known return address in libeay32.dll to bypass DEP and execute payloads.