FreeFloat FTP Server Buffer Overflow Vulnerability in BELL Command Handler

A critical buffer overflow vulnerability has been identified in FreeFloat FTP Server version 1.0. This issue arises from an unknown processing flaw in the BELL Command Handler, allowing remote exploitation. The vulnerability has been publicly disclosed and could be actively exploited.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted BELL command that includes a payload designed to overflow the buffer. This can be done using a TCP connection to the FTP server's port 21. The payload should be carefully crafted to include the desired shellcode, such as a reverse shell, and to overwrite the return address with a location that executes the shellcode.