CVE-2004-1439
BlackJumboDog 3.x - Remote Code Execution via Long FTP Commands
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1439. PoCs published by Delikon, Tal Zeltzer.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in BlackJumboDog FTP Server version 3.6.1. It sends a crafted USER command with a long buffer containing a return address and shellcode to achieve remote code execution, then uploads and executes an arbitrary file via a secondary connection on port 7777.
Description
Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1) USER, (2) PASS, (3) RETR,(4) CWD, (5) XMKD, and (6) XRMD.
Exploits (2)
This exploit targets a buffer overflow vulnerability in BlackJumboDog FTP Server version 3.6.1. It sends a crafted USER command with a long buffer containing a return address and shellcode to achieve remote code execution, then uploads and executes an arbitrary file via a secondary connection on port 7777.
This exploit targets a buffer overflow vulnerability in the BlackJumboDog FTP server via a maliciously crafted PASS command. It delivers a Metasploit-generated win32_bind shellcode to achieve remote code execution on Windows 2000 SP4.