PCMan FTP Server Buffer Overflow Vulnerability in BELL Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the BELL Command Handler component, allowing remote exploitation. The vulnerability has been publicly disclosed and is actively exploitable.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash.

Reproduction

The vulnerability can be reproduced by connecting to the FTP server on port 21 and sending a 'BELL' command with a crafted payload that exploits the buffer overflow. The payload must be carefully constructed to overwrite the return address and execute arbitrary code. This can be done using a script or tool that automates the process, such as one based on the Metasploit Framework.