CVE-2005-1666
orenosv_http_ftp_server < 0.8.1 - Authenticated Buffer Overflow via Long FTP Command Arguments
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-1666. PoCs published by Samsta, Tan Chew Keong.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Orenosv HTTP/FTP Server 0.8.1 by sending an overly long filename via the MKD FTP command. It requires authentication and may lead to remote code execution or denial of service.
Description
Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the (1) ftp_xlate_path, (2) ftp_is_canonical, or (3) os_fn_nativize functions, or (4) a long SSI command that is processed by the parse_cmd function in cgissi.exe.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Orenosv HTTP/FTP Server 0.8.1 by sending an overly long filename via the MKD FTP command. It requires authentication and may lead to remote code execution or denial of service.
The exploit describes a buffer overflow vulnerability in Orenosv HTTP/FTP server's 'cgissi.exe' when handling excessive SSI command names. The provided example shows a basic SSI command with a long string of 'a' characters, but lacks executable code.