CVE-2006-4318
WFTPD Server 3.23 - Remote Code Execution via Long SIZE Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-4318.
PoCs published by Metasploit, h07, including Metasploit module exploits/windows/ftp/wftpd_size.
AI-analyzed exploit summary This exploit targets a buffer overflow in the SIZE verb of Texas Imperial Software WFTPD 3.23. It sends a maliciously crafted SIZE command to trigger the overflow and execute arbitrary code.
Description
Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.
Exploits (3)
This exploit targets a buffer overflow in the SIZE verb of Texas Imperial Software WFTPD 3.23. It sends a maliciously crafted SIZE command to trigger the overflow and execute arbitrary code.
This exploit targets a buffer overflow vulnerability in WFTPD server 3.23 via the SIZE command. It sends a crafted buffer with shellcode to achieve remote code execution, establishing a reverse shell to the attacker's specified IP and port.
This Metasploit module exploits a buffer overflow in the SIZE verb of Texas Imperial Software WFTPD 3.23. It sends a maliciously crafted SIZE command to trigger a stack-based overflow, leading to remote code execution.