PCMan FTP Server Buffer Overflow Vulnerability in LANG Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the LANG Command Handler component, where an unknown input is manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely, without any authentication.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a crash of the application.

Reproduction

The vulnerability can be reproduced by sending a crafted LANG command that includes a payload designed to overflow the buffer. This can be done using a TCP connection to the FTP server's port 21. The payload must be carefully crafted to include the desired shellcode and overwrite the return address with a location that will execute the shellcode, such as a JMP ESP instruction.