CVE-2011-5164
AbsoluteFTP 1.9.6-2.2.10 - Remote Code Execution via LIST Command Response
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-5164.
PoCs published by Node, including Metasploit module exploits/windows/ftp/absolute_ftp_list_bof.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in AbsoluteFTP versions 1.9.6 to 2.2.10 via the LIST command. It uses ROP gadgets from MFC42.DLL to bypass DEP and execute arbitrary code.
Description
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response.
Exploits (2)
This exploit targets a buffer overflow vulnerability in AbsoluteFTP versions 1.9.6 to 2.2.10 via the LIST command. It uses ROP gadgets from MFC42.DLL to bypass DEP and execute arbitrary code.
This Metasploit module exploits a buffer overflow in AbsoluteFTP via the LIST command, using ROP gadgets to bypass DEP and execute arbitrary code. It targets multiple versions of AbsoluteFTP on Windows systems.