Exploitation Summary
EIP tracks 2 public exploits for CVE-2015-7601.
PoCs published by Jay Turla, Jay Turla, James Fitts, including Metasploit module auxiliary/scanner/ftp/pcman_ftp_traversal.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in PCMan FTP Server v2.0.7, allowing an attacker to read arbitrary files (e.g., boot.ini) by traversing directories using '..//' sequences. The PoC connects to the FTP server, retrieves the file, and prints its contents.
Description
Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in PCMan FTP Server v2.0.7, allowing an attacker to read arbitrary files (e.g., boot.ini) by traversing directories using '..//' sequences. The PoC connects to the FTP server, retrieves the file, and prints its contents.
This Metasploit module exploits a directory traversal vulnerability in PCMan FTP Server 2.0.7, allowing an attacker to download arbitrary files from the server by crafting a RETR command with traversal strings.