CVE-2009-1675

This Metasploit module exploits a stack buffer overflow in the 32bit FTP client (CVE-2009-1675) by sending a maliciously crafted filename during a LIST command, triggering remote code execution via an egg hunter and payload.

This Metasploit module exploits a buffer overflow in the 32bit FTP client (version 09.04.24) via an excessively long PASV reply command. It delivers a reverse TCP payload to achieve remote code execution on vulnerable Windows systems.