CVE-2005-2373
SlimFTPd 3.15-3.16 - Authenticated Buffer Overflow via Long Directory Name
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-2373.
PoCs published by Metasploit, including Metasploit module exploits/windows/ftp/slimftpd_list_concat.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in SlimFTPd via an overly-long argument in the LIST command. It delivers a payload to achieve remote code execution on vulnerable versions prior to 3.16.
Description
Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in SlimFTPd via an overly-long argument in the LIST command. It delivers a payload to achieve remote code execution on vulnerable versions prior to 3.16.
This Metasploit module exploits a stack buffer overflow in SlimFTPd via an overly-long argument in the LIST command, leading to remote code execution. It targets versions prior to 3.16 and uses a universal return address for exploitation.