CVE-2005-3524
linux-ftpd-ssl 0.17 - Remote Code Execution via Long Directory Name XPWD Command
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3524. PoCs published by kingcope.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in linux-ftpd-ssl 0.17 via the AUTH SSL command, leading to remote code execution with root privileges. It uses a bind shell payload and brute-forces stack addresses to achieve exploitation.
Description
Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command.
Exploits (1)
This exploit targets a buffer overflow vulnerability in linux-ftpd-ssl 0.17 via the AUTH SSL command, leading to remote code execution with root privileges. It uses a bind shell payload and brute-forces stack addresses to achieve exploitation.