Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-5753. PoCs published by His0k4, Gabor Seljan.
AI-analyzed exploit summary This exploit demonstrates a local heap overflow vulnerability in BulletProof FTP Client v2.63 (Build 56) by crafting a malicious bookmark file. The PoC generates a 'sites.txt' file with an overly long FTP URL to trigger the overflow, potentially allowing arbitrary code execution.
Description
Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark file entry with a long host name, which appears as a host parameter within the quick-connect bar.
Exploits (2)
This exploit demonstrates a local heap overflow vulnerability in BulletProof FTP Client v2.63 (Build 56) by crafting a malicious bookmark file. The PoC generates a 'sites.txt' file with an overly long FTP URL to trigger the overflow, potentially allowing arbitrary code execution.
This exploit leverages a buffer overflow vulnerability in BulletProof FTP Client 2010 to achieve remote code execution via SEH overwrite and ROP chain. It includes an egghunter and shellcode to spawn calc.exe.