FreeFloat FTP Server Buffer Overflow Vulnerability in RMDIR Command Handler

A critical buffer overflow vulnerability has been identified in FreeFloat FTP Server version 1.0.0. The issue arises in the RMDIR Command Handler, where improper processing can be exploited remotely, leading to a buffer overflow condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can typically lead to arbitrary code execution or a crash of the application.

Reproduction

The vulnerability can be reproduced by sending a crafted RMDIR command that includes a payload designed to overflow the buffer. This can be done using a FTP client or a custom script that connects to the FTP server on port 21. The payload should be carefully crafted to include the necessary offset to reach the return address, followed by the address of a writable location or a jump instruction, and then the shellcode. Once the payload is prepared, it can be sent as part of the RMDIR command to trigger the buffer overflow.