PCMan FTP Server Buffer Overflow Vulnerability in SITE CHMOD Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the SITE CHMOD command handler, where an unknown functionality can be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash of the application.

Reproduction

The vulnerability can be reproduced by sending a crafted SITE CHMOD command that includes a payload designed to overflow the buffer. This can be done after successfully logging into the FTP server. The payload should be carefully crafted to include the desired shellcode and overwrite the return address with a location that allows the shellcode to be executed.