PCMan FTP Server Buffer Overflow Vulnerability in ASCII Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server versions through 2.0.7. This issue arises in the ASCII Command Handler component, allowing remote attackers to manipulate the server's memory and potentially execute arbitrary code.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution on the affected system.

Reproduction

The vulnerability can be reproduced by sending a crafted payload through the ASCII command after authenticating with the FTP server. The payload must be carefully crafted to exploit the buffer overflow by overwriting the return address with a location that executes the attacker's code.