CVE-2008-4321
FlashGet FTP 1.9 - Remote Code Execution via Long PWD Response
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-4321. PoCs published by Guido Landi, SkOd, h07.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Flash9f.ocx on Windows XP systems via an FTP server interaction. It bypasses SafeSEH and executes a calc.exe payload using a Metasploit-generated shellcode.
Description
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Flash9f.ocx on Windows XP systems via an FTP server interaction. It bypasses SafeSEH and executes a calc.exe payload using a Metasploit-generated shellcode.
This exploit targets a stack-based buffer overflow in FlashGet 1.9.0.1012 via an FTP PWD response. It uses SEH overwrite techniques to execute a calc.exe payload, demonstrating remote code execution.
This exploit demonstrates a remote buffer overflow in FlashGet 1.9 via a maliciously crafted FTP PWD response. The PoC sends an oversized directory path (332 'A' characters) to trigger an SEH overwrite, leading to a crash (EIP=41414141).