Exploitation Summary
EIP tracks 4 public exploits for CVE-2006-5792.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/ftp/xlink_server.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Xlink FTP Server bundled with Omni-NFS Enterprise 5.2. It sends an overly long FTP request to execute arbitrary code, achieving remote code execution (RCE).
Description
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by vd_xlink2.pm, an "Omni-NFS Enterprise remote exploit." NOTE: this is probably a different vulnerability than CVE-2006-5780. As of 20061107, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes.
Exploits (4)
This is a Metasploit module exploiting a stack buffer overflow in Xlink FTP Server bundled with Omni-NFS Enterprise 5.2. It sends an overly long FTP request to execute arbitrary code, achieving remote code execution (RCE).
This is a Metasploit module exploiting a stack buffer overflow in Xlink FTP Client 3.01 via an overly long FTP server response. It achieves remote code execution by sending a crafted payload to the client.
This Metasploit module exploits a stack buffer overflow in Xlink FTP Server bundled with Omni-NFS Enterprise 5.2 by sending an overly long FTP request, leading to arbitrary code execution. It includes a payload encoder and a specific return address for the target software.
This Metasploit module exploits a stack buffer overflow in Xlink FTP Client 3.01 by sending an overly long FTP server response, leading to arbitrary code execution. It targets specific return addresses for Windows XP SP3 and Windows 2000 SP4.