Exploitation Summary
EIP tracks 4 public exploits for CVE-2006-6563. PoCs published by Revenge, Core Security, pi3.
AI-analyzed exploit summary This exploit targets a buffer overflow in ProFTPD 1.3.0/1.3.0a via the Controls feature, binding a root shell on port 31337. It requires ProFTPD to be compiled with --enable-ctrls and local user access to the Unix socket.
Description
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
Exploits (4)
This exploit targets a buffer overflow in ProFTPD 1.3.0/1.3.0a via the Controls feature, binding a root shell on port 31337. It requires ProFTPD to be compiled with --enable-ctrls and local user access to the Unix socket.
This exploit targets a buffer overflow in ProFTPD v1.3.0/1.3.0a via the controls feature, binding a root shell on port 31337. It requires the server to be compiled with --enable-ctrls and local user access to the Unix socket.
This exploit targets a buffer overflow in ProFTPD 1.3.0a via a maliciously crafted payload sent over a Unix domain socket. It leverages a known stack layout and a trampoline to execute shellcode, though the shellcode itself is benign (int 3 instructions).
This exploit targets a buffer overflow vulnerability in ProFTPd's ftpdctl utility due to an unsafe strncpy call in the pr_ctrls_connect function. It provides two exploitation methods: environment-based and ret-to-libc, both leading to local privilege escalation via shellcode execution.