CVE-2012-5002

This Metasploit module exploits a stack-based buffer overflow in Ricoh DC DL-10 SR10 FTP service via a long USER command, allowing remote code execution. It includes a payload delivery mechanism and targets Windows XP SP3 with a specific return address in msvcrt.dll.

This exploit demonstrates a remote buffer overflow vulnerability in Ricoh DC Software DL-10 FTP Server (SR10.exe) <= 1.1.0.6. It sends a malformed USER command with a crafted payload to trigger the overflow, potentially leading to remote code execution.

This Metasploit module exploits a stack-based buffer overflow in Ricoh DC DL-10 SR10 FTP service via a maliciously crafted USER command. It achieves remote code execution by overwriting the return address with a PUSH ESP; RETN instruction from msvcrt.dll.