FreeFloat FTP Server Buffer Overflow Vulnerability in BINARY Command Handler

A critical buffer overflow vulnerability has been identified in FreeFloat FTP Server version 1.0. The issue arises in the BINARY Command Handler, where an unknown function allows for remote exploitation. The vulnerability has been publicly disclosed and could be actively exploited.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a crash, depending on how the overflow is handled.

Reproduction

The vulnerability can be reproduced by sending a crafted BINARY command that includes a payload designed to overflow the buffer. This can be done using a network socket connection to the FTP server's command port (usually port 21). The payload should be carefully crafted to include the desired shellcode after the overwritten return address, exploiting the buffer overflow vulnerability.