CVE-2004-2074
Dream FTP 1.02 - Denial of Service via Format String in PASS or RETR Commands
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-2074.
PoCs published by Metasploit, Skylined, aushack, including Metasploit module exploits/windows/ftp/dreamftp_format.
AI-analyzed exploit summary This Metasploit module exploits a format string vulnerability in BolinTech Dream FTP Server 1.02, allowing remote code execution via a crafted payload sent to the FTP service on port 21.
Description
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.
Exploits (3)
This Metasploit module exploits a format string vulnerability in BolinTech Dream FTP Server 1.02, allowing remote code execution via a crafted payload sent to the FTP service on port 21.
This exploit targets a format string vulnerability in Dream FTP v1.2, leveraging a shellcode payload to bind a shell on port 28876. It manipulates the SEH handler to redirect execution to the shellcode.
This Metasploit module exploits a format string vulnerability in BolinTech Dream FTP Server 1.02, allowing remote code execution via a crafted payload sent to the FTP service on port 21. The exploit leverages a format string overflow to overwrite memory and execute arbitrary code.