Exploitation Summary
EIP tracks 4 public exploits for CVE-2006-6576.
PoCs published by 1F98D, Metasploit, cd1zz & iglesiasgg, including Metasploit module exploits/windows/ftp/goldenftp_pass_bof.
AI-analyzed exploit summary This exploit targets a buffer overflow in Golden FTP Server 4.70 during the authentication process. It uses an egg hunter technique to locate and execute shellcode, which is generated by msfvenom for a reverse TCP shell.
Description
Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long PASS command. NOTE: it was later reported that 4.70 is also affected. NOTE: the USER vector is already covered by CVE-2005-0634.
Exploits (4)
This exploit targets a buffer overflow in Golden FTP Server 4.70 during the authentication process. It uses an egg hunter technique to locate and execute shellcode, which is generated by msfvenom for a reverse TCP shell.
This is a Metasploit module exploiting a stack-based buffer overflow in GoldenFTP Server 4.70 via the PASS command. It delivers a payload to achieve remote code execution on Windows systems.
This exploit targets a buffer overflow vulnerability in GoldenFTP Server 4.70 by sending a maliciously crafted PASS command. It includes a Metasploit-generated bind shell payload and requires knowledge of the target's subnet to determine the correct offset.
This Metasploit module exploits a stack buffer overflow in Golden FTP Server via the PASS command, leveraging a JMP ESI instruction to execute arbitrary payloads. It includes target-specific return addresses for various Windows XP service packs.