Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-3976.
PoCs published by Metasploit, His0k4, including Metasploit module exploits/windows/ftp/proftp_banner.
AI-analyzed exploit summary This exploit targets a buffer overflow in ProFTP 2.9 by sending an excessively long welcome message to trigger a remote code execution vulnerability. It uses a Metasploit module to craft a malicious FTP banner response containing shellcode.
Description
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message).
Exploits (3)
This exploit targets a buffer overflow in ProFTP 2.9 by sending an excessively long welcome message to trigger a remote code execution vulnerability. It uses a Metasploit module to craft a malicious FTP banner response containing shellcode.
This exploit targets a buffer overflow vulnerability in ProFTP 2.9 by sending an excessively long welcome message to trigger a remote code execution. It uses a Metasploit module to craft the payload and handle the TCP connection.
This Metasploit module exploits a buffer overflow in ProFTP 2.9 by sending an excessively long welcome message to trigger a remote code execution vulnerability. It uses a SEH-based exploit technique with a universal return address for XP SP3.