PCMan FTP Server Buffer Overflow Vulnerability in HOST Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in an unknown function of the HOST Command Handler component, allowing remote exploitation. The vulnerability has been publicly disclosed and is associated with a known exploit.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted HOST command that includes a payload designed to overflow the buffer. This can be done using a FTP client or a custom script that connects to the FTP server on port 21. The payload should be carefully crafted to include the necessary offset to reach the return address, followed by the exploit code.