PCMan FTP Server Buffer Overflow Vulnerability in RECV Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. The issue arises in the RECV Command Handler, allowing remote exploitation. The vulnerability has been publicly disclosed and is associated with a known exploit.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by connecting to the FTP server on port 21 and authenticating with the USER and PASS commands. After establishing the connection, the RECV command can be issued with a crafted payload that exploits the buffer overflow vulnerability.