PCMan FTP Server Buffer Overflow Vulnerability in LS Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server versions through 2.0.7. The issue arises in the LS Command Handler component, allowing remote exploitation of the vulnerability.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash, depending on how the overflow is handled.

Reproduction

The vulnerability can be reproduced by sending a crafted 'LS' command that includes a payload designed to overflow the buffer. This can be done after authenticating with the FTP server using the 'USER' and 'PASS' commands. The payload should be carefully crafted to overwrite the return address and execute arbitrary code.