PCMan FTP Server Buffer Overflow Vulnerability in CD Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the CD Command Handler component, where an unknown functionality can be manipulated, potentially allowing remote exploitation. The vulnerability has been publicly disclosed and is associated with a known exploit.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash, depending on how the overflow is handled.

Reproduction

The vulnerability can be reproduced by sending a crafted 'MDIR' command that includes a payload designed to overflow the buffer. This can be done using a TCP connection to the FTP server's port 21. The payload must be carefully crafted to include the desired shellcode and overwrite the return address with a location that will execute the shellcode, such as a 'JMP ESP' address.