PCMan FTP Server Buffer Overflow Vulnerability in NLST Command Handler

A critical buffer overflow vulnerability has been identified in PCMan FTP Server version 2.0.7. This issue arises in the NLST command handler, where unknown code can be manipulated, potentially leading to arbitrary code execution. The vulnerability can be exploited remotely, and the existence of a public exploit has been disclosed.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the application to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted NLST command that exceeds the buffer size, causing a buffer overflow. This can be done using an FTP client that allows for the manipulation of command parameters.