CVE-2004-1626
Ability Server 2.34 - Remote Code Execution via Long STOR Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-1626.
PoCs published by NoPh0BiA, muts, muts, Dark Eagle, Peter Osterberg, including Metasploit module exploits/windows/ftp/ability_server_stor.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Ability Server 2.34 via the FTP STOR command. It sends a crafted payload containing shellcode to achieve remote code execution, resulting in a reverse shell connection back to the attacker.
Description
Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Ability Server 2.34 via the FTP STOR command. It sends a crafted payload containing shellcode to achieve remote code execution, resulting in a reverse shell connection back to the attacker.
This exploit targets a buffer overflow vulnerability in Ability Server 2.34 FTP STOR command. It sends a crafted buffer with a return address and shellcode to achieve remote code execution on Windows XP SP2.
This Metasploit module exploits a stack-based buffer overflow in Ability Server 2.34 via the 'STOR' command, allowing remote code execution. It includes targets for Windows XP SP2 and SP3, leveraging JMP ESP instructions for payload delivery.