CVE-2017-18047
CRITICALLabF nfsAxe 3.7 - Buffer Overflow via Long FTP Reply
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2017-18047.
PoCs published by Metasploit, Tulpa, wetw0rk, including Metasploit module exploits/windows/ftp/labf_nfsaxe.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in LabF nfsAxe 3.7 FTP Client via a malicious FTP server response, leading to remote code execution. It uses an egghunter and SEH overwrite to achieve reliability.
Description
Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply.
Exploits (4)
This Metasploit module exploits a stack-based buffer overflow in LabF nfsAxe 3.7 FTP Client via a malicious FTP server response, leading to remote code execution. It uses an egghunter and SEH overwrite to achieve reliability.
This exploit targets a buffer overflow vulnerability in LabF nfsAxe 3.7 FTP Client via SEH overwrite. It uses an egghunter and shellcode to achieve remote code execution on Windows Vista x86.
This exploit targets a buffer overflow vulnerability in LabF nfsAxe 3.7 FTP client, bypassing DEP via a ROP chain to achieve remote code execution. It sends a crafted payload to overwrite the SEH record and execute shellcode.
This Metasploit module exploits a stack buffer overflow in LabF nfsAxe 3.7 FTP Client via a malicious FTP server response, leading to remote code execution. It uses an egghunter and SEH overwrite to achieve reliability.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H