CVE-2011-10005
MEDIUMEasyFTP 1.7.0.2 - Buffer Overflow via MKD Command Handler
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-10005.
PoCs published by b33f, including Metasploit module exploits/windows/ftp/easyftp_mkd_fixret.
AI-analyzed exploit summary This exploit targets a post-authentication buffer overflow in Easy~Ftp Server v1.7.0.2. It uses a crafted MKD command with a payload containing shellcode and an egghunter to achieve remote code execution.
Description
A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250716.
Exploits (2)
This exploit targets a post-authentication buffer overflow in Easy~Ftp Server v1.7.0.2. It uses a crafted MKD command with a payload containing shellcode and an egghunter to achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in EasyFTP Server via the MKD command, using a 'fixRet' technique to inject a larger payload into a small buffer. It targets multiple versions of EasyFTP Server (1.7.0.2 to 1.7.0.11) and achieves remote code execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L