CVE-2005-0419

3Com 3CServer - Authenticated Remote Code Execution via Long FTP Command

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-0419. PoCs published by mandragore.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in 3CServer v1.1 FTP server. It overwrites the SEH pointer and executes a bind shell payload on port 1180 (or user-specified).

Description

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command.

Exploits (1)

exploitdb WORKING POC VERIFIED

by mandragore · cremotewindows

https://www.exploit-db.com/exploits/794

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in 3CServer v1.1 FTP server. It overwrites the SEH pointer and executes a bind shell payload on port 1180 (or user-specified).

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: 3CServer v1.1.007

Auth required

Prerequisites: Network access to the FTP server · Valid credentials (default: anonymous/[email protected])

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/19250

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=110780306326130&w=2

Scores

EPSS 0.0392

EPSS Percentile 89.0%

Details

Status published

Products (1)

3com/3cserver 1.1

Published Apr 27, 2005

Tracked Since Feb 18, 2026