CVE-2005-3683
freeFTPd < 1.0.9 - Stack-Based Buffer Overflow via Long USER Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-3683.
PoCs published by Metasploit, including Metasploit module exploits/windows/ftp/freeftpd_user.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in freeFTPd 1.0 when logging is enabled. It leverages a malformed USER command to trigger the vulnerability and execute arbitrary code via SEH overwrite.
Description
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command.
Exploits (3)
This exploit targets a stack buffer overflow in freeFTPd 1.0 when logging is enabled. It leverages a malformed USER command to trigger the vulnerability and execute arbitrary code via SEH overwrite.
This exploit targets a buffer overflow vulnerability in FreeFTPD's USER command handling, allowing remote code execution via a crafted username. The PoC includes shellcode for a reverse shell and handles multiple Windows targets.
This Metasploit module exploits a stack buffer overflow in freeFTPd 1.0 via a maliciously crafted USER command. It leverages SEH overwrites to achieve remote code execution when logging is enabled.