CVE-2005-3684
freeFTPd 1.0.8 - Authenticated Buffer Overflow via MKD or DELE Command
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3684. PoCs published by Expanders.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in FreeFTPD's USER command handling, allowing remote code execution via a crafted username. The PoC includes shellcode for a reverse shell and targets multiple Windows versions.
Description
Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via long (1) MKD and (2) DELE commands.
Exploits (1)
This exploit targets a buffer overflow vulnerability in FreeFTPD's USER command handling, allowing remote code execution via a crafted username. The PoC includes shellcode for a reverse shell and targets multiple Windows versions.