Exploitation Summary
EIP tracks 3 public exploits for CVE-2012-5002.
PoCs published by Metasploit, Julien Ahrens, sinn3r, including Metasploit module exploits/windows/ftp/ricoh_dl_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Ricoh DC DL-10 SR10 FTP service via a long USER command, allowing remote code execution. It includes a payload delivery mechanism and targets Windows XP SP3 with a specific return address in msvcrt.dll.
Description
Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in Ricoh DC DL-10 SR10 FTP service via a long USER command, allowing remote code execution. It includes a payload delivery mechanism and targets Windows XP SP3 with a specific return address in msvcrt.dll.
This exploit demonstrates a remote buffer overflow vulnerability in Ricoh DC Software DL-10 FTP Server (SR10.exe) <= 1.1.0.6. It sends a malformed USER command with a crafted payload to trigger the overflow, potentially leading to remote code execution.
This Metasploit module exploits a stack-based buffer overflow in Ricoh DC DL-10 SR10 FTP service via a maliciously crafted USER command. It achieves remote code execution by overwriting the return address with a PUSH ESP; RETN instruction from msvcrt.dll.