PCMan FTP Server Buffer Overflow Vulnerability in GLOB Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server versions through 2.0.7. The issue arises in the GLOB Command Handler component, allowing remote exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash.

Reproduction

The vulnerability can be reproduced by sending a crafted payload through the GLOB command. The payload must be carefully constructed to overflow the buffer and overwrite the return address, typically aiming for a location that allows execution of injected code. This can be done using a FTP client that supports sending custom GLOB command payloads.