CVE-2009-1592
ElectraSoft 32bit FTP 09.04.24 - Stack-based Buffer Overflow via Long FTP Banner
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1592. PoCs published by His0k4, Load 99%.
AI-analyzed exploit summary This exploit targets a remote buffer overflow in 32-bit FTP (09.04.24) by sending a crafted payload to port 21. It uses a JMP ESP instruction from kernel32.dll and includes Metasploit-generated shellcode to execute 'calc.exe'.
Description
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner. NOTE: this might overlap CVE-2003-1368.
Exploits (2)
This exploit targets a remote buffer overflow in 32-bit FTP (09.04.24) by sending a crafted payload to port 21. It uses a JMP ESP instruction from kernel32.dll and includes Metasploit-generated shellcode to execute 'calc.exe'.
This exploit triggers a buffer overflow in 32bit FTP Client 09.04.24 by sending a maliciously large FTP banner (5060 bytes of 'A's). The crash occurs due to uncontrolled data copy into a fixed-size buffer, leading to an access violation.