CVE-2005-0277
3Com 3CDaemon 2.0 revision 10 - Buffer Overflow via Long FTP Command Argument
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2005-0277.
PoCs published by Metasploit, class101, c0d3r, including Metasploit module exploits/windows/ftp/3cdaemon_ftp_user.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in 3Com 3CDaemon FTP Server 2.0 via the USER command, allowing remote code execution. It includes SEH-based exploitation and targets multiple Windows versions.
Description
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
Exploits (4)
This Metasploit module exploits a buffer overflow in 3Com 3CDaemon FTP Server 2.0 via the USER command, allowing remote code execution. It includes SEH-based exploitation and targets multiple Windows versions.
This exploit targets a buffer overflow vulnerability in 3CDaemon FTP server (CVE-2005-0277) by sending a maliciously crafted USER command without requiring authentication. It includes shellcode for both bind and reverse shell payloads, with support for multiple Windows versions.
This exploit targets a buffer overflow vulnerability in 3CDaemon FTP Server version 2.0 revision 10. It sends a maliciously crafted buffer to trigger a stack-based overflow, redirecting execution to shellcode that binds a shell on port 4444.
This Metasploit module exploits a buffer overflow vulnerability in 3Com 3CDaemon FTP Server Version 2.0 via the USER command, allowing remote code execution. It includes SEH-based exploitation for various Windows versions.