PCMan FTP Server Buffer Overflow Vulnerability in VERBOSE Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server versions through 2.0.7. The issue arises in the VERBOSE Command Handler, allowing remote exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash.

Reproduction

The vulnerability can be reproduced by sending a crafted payload through the VERBOSE command. The payload must be carefully constructed to exploit the buffer overflow, typically by overwriting the return address with a location that executes malicious code. This can be done using a FTP client that allows sending custom VERBOSE command data.