CVE-2012-10035
CRITICALTurbo FTP Server <1.30.823-1.30.826 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-10035.
PoCs published by Metasploit, Zhao Liang, Lincoln, corelanc0d3r, thelightcosine, including Metasploit module exploits/windows/ftp/turboftp_port.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Turbo FTP Server's PORT command to achieve remote code execution with SYSTEM privileges. It uses ROP chains and an egghunter to deploy the payload.
Description
Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privileges.
Exploits (2)
This Metasploit module exploits a buffer overflow in Turbo FTP Server's PORT command to achieve remote code execution with SYSTEM privileges. It uses ROP chains and an egghunter to deploy the payload.
This Metasploit module exploits a buffer overflow in Turbo FTP Server's PORT command (CVE-2012-10035) to achieve remote code execution as SYSTEM. It uses ROP chains and an egghunter to bypass memory protections and locate the payload.
References (3)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H