CVE-2006-2027
Quick 'n Easy FTP Server Professional and Lite - Authenticated Buffer Overflow in Logging Functionality
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-2027. PoCs published by KaGra.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Quick 'n Easy FTP Server 2.4 by sending a large buffer (1041 bytes) in the PASS command, causing a denial of service (DoS) when the server's log file is viewed. The exploit uses Perl and the Net::FTP module to connect and send the malicious payload.
Description
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when an admin selects the Logging section in the FTP server main window. NOTE: the original researcher claims that the vendor disputes this issue.
Exploits (1)
This exploit targets a buffer overflow vulnerability in Quick 'n Easy FTP Server 2.4 by sending a large buffer (1041 bytes) in the PASS command, causing a denial of service (DoS) when the server's log file is viewed. The exploit uses Perl and the Net::FTP module to connect and send the malicious payload.