CVE-2006-5815
ProFTPD < 1.3.0 - Stack-based Buffer Overflow in sreplace Function
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-5815.
PoCs published by Metasploit, Evgeny Legerov, including Metasploit module exploits/linux/ftp/proftp_sreplace.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in ProFTPD 1.2 through 1.3.0 via the 'sreplace' function. It uploads a malicious '.message' file to a writable directory and triggers the vulnerability by changing to that directory, leading to remote code execution.
Description
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."
Exploits (3)
This exploit targets a stack-based buffer overflow in ProFTPD 1.2 through 1.3.0 via the 'sreplace' function. It uploads a malicious '.message' file to a writable directory and triggers the vulnerability by changing to that directory, leading to remote code execution.
This is a Metasploit module exploiting a stack overflow in ProFTPD 1.3.0 via the sreplace function. It uploads a malicious .message file to trigger the vulnerability and achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in ProFTPD 1.2 through 1.3.0 via the 'sreplace' function. It triggers the vulnerability by uploading a crafted '.message' file to a writable directory and executing a 'CWD' command.