FreeFloat FTP Server Buffer Overflow Vulnerability in APPEND Command Handler

A critical buffer overflow vulnerability has been identified in FreeFloat FTP Server version 1.0. This issue arises in the APPEND Command Handler, where unknown code is susceptible to remote exploitation. The vulnerability has been publicly disclosed and could be actively exploited.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by connecting to the FTP server on port 21 and authenticating with a username and password. After establishing the connection, the APPEND command can be issued with a crafted payload that exploits the buffer overflow vulnerability. The payload should be designed to overwrite the return address with a location that executes the injected code, such as a reverse shell payload.