PCMan FTP Server Buffer Overflow Vulnerability in FEAT Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the FEAT Command Handler, where an unknown functionality can be manipulated to cause a buffer overflow. This vulnerability can be exploited remotely, and the exploit has been publicly disclosed.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash of the application.

Reproduction

The vulnerability can be reproduced by sending a crafted FEAT command that includes a payload designed to overflow the buffer. This can be done using a FTP client or a custom script that connects to the FTP server on port 21. The payload should be carefully crafted to overwrite the return address and execute arbitrary code. The exploit has been tested on Windows XP SP3.