PCMan FTP Server Buffer Overflow Vulnerability in REST Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. This issue arises from an unknown processing flaw in the REST Command Handler, allowing remote exploitation. The vulnerability has been publicly disclosed and is accompanied by a proof-of-concept exploit.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash.

Reproduction

The vulnerability can be reproduced by sending a crafted REST command that includes a payload designed to overflow the buffer. This can be done using a script that connects to the FTP server, authenticates, and then sends the exploit payload as part of the REST command.