PCMan FTP Server Buffer Overflow Vulnerability in EPSV Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the EPSV command handler, allowing remote exploitation. The vulnerability has been publicly disclosed and could be actively exploited.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash, depending on how the overflow is handled.

Reproduction

The vulnerability can be reproduced by sending an EPSV command with a crafted payload that exploits the buffer overflow. This can be done using a TCP connection to the FTP server's port 21. The payload should be carefully crafted to overwrite the return address and execute arbitrary code. The provided exploit example demonstrates this process.