CVE-2006-3952
EFS Software Easy File Sharing FTP Server 2.0 - Stack-Based Buffer Overflow via PASS Command
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2006-3952.
PoCs published by superkojiman, Metasploit, Winny Thomas, including Metasploit module exploits/windows/ftp/easyfilesharing_pass.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Easy File Sharing FTP Server 3.5 by sending an overly long password during authentication. It leverages a pop/pop/retn address from SSLEAY32.DLL for reliable SEH exploitation and executes a calc.exe shellcode payload.
Description
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long argument to the PASS command. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Exploits (5)
This exploit targets a stack buffer overflow in Easy File Sharing FTP Server 3.5 by sending an overly long password during authentication. It leverages a pop/pop/retn address from SSLEAY32.DLL for reliable SEH exploitation and executes a calc.exe shellcode payload.
This is a Metasploit module exploiting a stack buffer overflow in Easy File Sharing FTP Server 2.0 via an overly long password during authentication. It achieves remote code execution by overwriting the return address with a target-specific address.
This exploit targets a buffer overflow vulnerability in Easy File Sharing FTP Server 2.0, delivering a bind shell on TCP port 4444. It leverages a crafted PASS command to trigger the overflow and execute shellcode.
This exploit targets a buffer overflow vulnerability in Easy File Sharing FTP Server 2.0 via the PASS command. It sends a crafted payload with NOP sleds, shellcode (executes calc.exe), and a controlled EIP to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Easy File Sharing FTP Server 2.0 by sending an overly long password during authentication, allowing arbitrary code execution.