CVE-2013-10042
CRITICALfreeFTPd < 1.0.10 - Stack-based Buffer Overflow via FTP PASS Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-10042.
PoCs published by Wireghoul, including Metasploit module exploits/windows/ftp/freeftpd_pass.
AI-analyzed exploit summary This exploit targets a SEH buffer overflow in freeFTPd 1.0.10 during anonymous authentication. It uses an egghunter and shellcode to spawn a command shell via a crafted PASS command.
Description
A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled.
Exploits (2)
This exploit targets a SEH buffer overflow in freeFTPd 1.0.10 during anonymous authentication. It uses an egghunter and shellcode to spawn a command shell via a crafted PASS command.
This Metasploit module exploits a buffer overflow in freeFTPd 1.0.10 and below via a maliciously crafted PASS command, allowing remote code execution. The exploit leverages a known return address and payload encoding to bypass bad characters.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H