CVE-2014-125114

This Metasploit module exploits a stack-based buffer overflow in i-FTP v2.20 via a maliciously crafted Schedule.xml file. It leverages a long 'Time' value to trigger the overflow and execute arbitrary code, targeting Windows XP SP3 with a specific return address in Lgi.dll.

This exploit leverages a buffer overflow vulnerability in i.FTP v2.20 by crafting a malicious XML file to overwrite SEH and execute arbitrary shellcode (calc.exe). The payload is encoded using Metasploit's alpha_upper encoder to bypass bad characters.

This Metasploit module exploits a stack-based buffer overflow in i-FTP v2.20 via a maliciously crafted Schedule.xml file. It leverages SEH overwrites and a hardcoded return address to achieve remote code execution on Windows XP SP3.