PCMan FTP Server Buffer Overflow Vulnerability in MODE Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the MODE Command Handler, where the application improperly validates the size of input buffers before copying them to output buffers. This oversight allows for remote exploitation of the vulnerability, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can be leveraged to execute arbitrary code on the affected system.

Reproduction

The vulnerability can be reproduced by sending a crafted MODE command that includes a payload designed to overflow the buffer. This can be done using a FTP client or a custom script that connects to the FTP server on port 21. The payload should be carefully crafted to overwrite the return address and execute arbitrary code.