PCMan FTP Server Buffer Overflow Vulnerability in ENC Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. This issue arises from an unknown processing flaw in the ENC Command Handler, allowing remote exploitation. The vulnerability has been publicly disclosed and is actively exploitable.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by connecting to the FTP server on port 21 and authenticating with the USER and PASS commands. After establishing the connection, the ENC command can be sent with a crafted payload that exploits the buffer overflow vulnerability.