FreeFloat FTP Server Buffer Overflow Vulnerability in MGET Command Handler

A critical buffer overflow vulnerability has been identified in FreeFloat FTP Server version 1.0, specifically within the MGET Command Handler. This vulnerability can be exploited remotely, leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can be leveraged to execute arbitrary code on the server.

Reproduction

The vulnerability can be reproduced by sending a crafted MGET command that includes a payload designed to overflow the buffer. This can be done using a FTP client or a custom script that connects to the FTP server on port 21. The payload should be carefully crafted to include the desired shellcode, such as a reverse shell, and to overwrite the return address with a location that points to the shellcode.