CVE-2006-2961
CesarFTP <= 0.99g - Stack-Based Buffer Overflow via MKD Command
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2006-2961.
PoCs published by Irving Aguilar, Metasploit, h07, including Metasploit module exploits/windows/ftp/cesarftp_mkd.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in CesarFTP 0.99g via the XCWD command. It sends a malformed buffer to trigger a Denial of Service (DoS) condition.
Description
Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MKD command. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Exploits (4)
This exploit targets a buffer overflow vulnerability in CesarFTP 0.99g via the XCWD command. It sends a malformed buffer to trigger a Denial of Service (DoS) condition.
This exploit targets a stack buffer overflow in CesarFTP 0.99g via the MKD command, allowing remote code execution. It includes multiple return addresses for different Windows versions and requires valid credentials.
This exploit targets a buffer overflow vulnerability in CesarFTP 0.99g by sending a maliciously crafted MKD command with a NOP sled and shellcode to execute calc.exe. It leverages a JMP ESP instruction in shell32.dll on Windows XP SP2 Polish.
This Metasploit module exploits a stack buffer overflow in CesarFTP 0.99g via the MKD command, allowing remote code execution. It includes multiple return addresses for different Windows versions and requires valid credentials.