CVE-2006-2254

FileCOPA 1.01 - Denial of Service via Newline Overflow in Username

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2254. PoCs published by Bigeazer.

AI-analyzed exploit summary This exploit targets a denial-of-service (DoS) vulnerability in FileCopa FTP server by sending an excessive number of newline characters in the USER login field, causing the process to crash. The payload consists of 248 newline characters followed by a repeated pattern of 0xdeadbeef.

Description

Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service (application crash) via a username with a large number of newline characters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Bigeazer · pythondoswindows

https://www.exploit-db.com/exploits/1754

View Code ZIP pw:eip

This exploit targets a denial-of-service (DoS) vulnerability in FileCopa FTP server by sending an excessive number of newline characters in the USER login field, causing the process to crash. The payload consists of 248 newline characters followed by a repeated pattern of 0xdeadbeef.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: FileCopa FTP Server (filecpnt.exe)

No auth needed

Prerequisites: Network access to the target FTP server

MITRE ATT&CK