FreeFloat FTP Server Buffer Overflow Vulnerability in MDIR Command Handler

A critical buffer overflow vulnerability has been identified in FreeFloat FTP Server version 1.0. The issue arises in the MDIR Command Handler, where an unknown functionality can be manipulated to cause a buffer overflow. This vulnerability can be exploited remotely, leading to potential arbitrary code execution.

Impact

Exploitation of this vulnerability allows for a remote buffer overflow, which could be used to execute arbitrary code on the affected system.

Reproduction

The vulnerability can be reproduced by sending an excessive amount of data through the 'mdir' command. This causes the application to crash, indicating a buffer overflow condition. After identifying the offset needed to overwrite the return address, the exploitation can be completed by injecting a payload, such as a reverse shell, into the overflowed buffer.