PCMan FTP Server Buffer Overflow Vulnerability in PROMPT Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server versions prior to 2.0.7. The issue arises in an unknown function within the PROMPT Command Handler, allowing remote exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash of the application.

Reproduction

The vulnerability can be reproduced by sending a crafted payload through the FTP 'PROMPT' command. The payload must be carefully constructed to overflow the buffer and overwrite the return address, directing execution to the attacker's code. This can be done using a Perl script that establishes a reverse shell connection.