CVE-2017-15222
CRITICALnftp < 2.0 - Remote Code Execution via Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2017-15222.
PoCs published by Metasploit, Berk Cem Göksel, Uday Mittal, including Metasploit module exploits/windows/ftp/ayukov_nftp.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Ayukov NFTPD FTP Client 2.0 and earlier by sending an overly long response to the SYST request, potentially leading to remote code execution. The exploit uses a crafted payload with bad character avoidance and a specific return address for Windows XP SP3.
Description
Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.
Exploits (4)
This Metasploit module exploits a stack-based buffer overflow in Ayukov NFTPD FTP Client 2.0 and earlier by sending an overly long response to the SYST request, potentially leading to remote code execution. The exploit uses a crafted payload with bad character avoidance and a specific return address for Windows XP SP3.
This exploit targets a buffer overflow vulnerability in Ayukov NFTP FTP Client (CVE-2017-15222) by sending a maliciously crafted buffer to trigger arbitrary code execution. The PoC includes shellcode to spawn calc.exe and leverages a call ESP instruction to redirect execution flow.
This exploit targets a buffer overflow vulnerability in Ayukov NFTP FTP Client 2.0. It sends a crafted payload to trigger a buffer overflow, overwriting the EIP and executing shellcode for a bind shell.
This Metasploit module exploits a stack-based buffer overflow in Ayukov NFTPD FTP Client 2.0 and earlier by sending a maliciously crafted SYST response. It achieves remote code execution under the context of the user by overflowing the buffer with a payload and return address.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H