PCMan FTP Server Buffer Overflow Vulnerability in TRACE Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the TRACE command handler, where an unknown function allows for remote exploitation. The vulnerability has been publicly disclosed and could be actively exploited.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash.

Reproduction

The vulnerability can be reproduced by sending a crafted TRACE command that includes a payload designed to overflow the buffer. This can be done using a TCP socket connection to the FTP server's port 21. The payload should be approximately 2005 bytes of 'A' characters followed by the address of a JMP ESP instruction, then a NOP sled, and finally the shellcode. After establishing a connection and authenticating with the FTP server, the TRACE command can be sent with the crafted payload.