Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-5754. PoCs published by Rafa De Sousa, His0k4, Stack.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in BulletProof FTP Client v2.63 build 56 by crafting a malicious session file (.bps) that triggers an SEH overwrite. The PoC generates a file with a controlled payload to achieve arbitrary code execution.
Description
Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session-File) with a long second line, possibly a related issue to CVE-2008-5753.
Exploits (3)
This exploit demonstrates a buffer overflow vulnerability in BulletProof FTP Client v2.63 build 56 by crafting a malicious session file (.bps) that triggers an SEH overwrite. The PoC generates a file with a controlled payload to achieve arbitrary code execution.
This exploit targets a buffer overflow vulnerability in BulletProof FTP Client 2009 via a malformed .bps session file. It leverages SEH overwrite with a jump to shellcode, executing a calc.exe payload.
This exploit generates a malformed BulletProof FTP Client session file (.bps) with a long string of 'A' characters to trigger a local stack overflow. The PoC creates a file named 'Stack.bps' that, when loaded, causes the application to crash due to buffer overflow.