CVE-2006-0441
Sami FTP Server 2.0.1 - Stack-Based Buffer Overflow via Long USER Command
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2006-0441.
PoCs published by n30m1nd, UmZ, Marsu, including Metasploit module exploits/windows/ftp/sami_ftpd_user.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Sami FTP Server 2.0.2 by overwriting SEH and executing a bind shellcode on port 4444. It uses a combination of alignment, SEH overwrite, and shellcode execution to achieve remote code execution.
Description
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed.
Exploits (8)
This exploit targets a buffer overflow vulnerability in Sami FTP Server 2.0.2 by overwriting SEH and executing a bind shellcode on port 4444. It uses a combination of alignment, SEH overwrite, and shellcode execution to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in SAMI FTP Server 2.0.2, allowing arbitrary remote code execution via a crafted USER command. The shellcode spawns calc.exe as a proof of concept.
This exploit triggers a buffer overflow in KarjaSoft Sami FTP Server 2.0.2 by sending an overly long USER/PASS request, overwriting EAX and EDX registers. It demonstrates a denial-of-service condition but does not include shellcode for remote code execution.
This exploit targets a buffer overflow vulnerability in Sami FTP Server, leveraging a crafted payload with NOP sleds and shellcode to achieve remote code execution. The shellcode binds a shell to port 777.
This exploit targets Sami FTP Server v2.0.1 by leveraging a buffer overflow vulnerability to execute arbitrary code (notepad.exe) via a crafted username during login. It uses a variety of return addresses for different Windows and FreeBSD/Wine environments.
This exploit targets a stack overflow vulnerability in PMSoftware Samftpd's log handler. It sends a maliciously crafted PASS command with a long buffer to overwrite the return address and execute shellcode.
This Metasploit module exploits an unauthenticated stack buffer overflow in KarjaSoft Sami FTP Server v2.0.2 by sending an overly long USER string during login, triggering payload execution when the administrator opens the GUI.
This Metasploit module exploits a stack-based buffer overflow in KarjaSoft Sami FTP Server v2.02 via an excessively long USER command. The exploit is passive, requiring administrator interaction to view FTP logs for execution.