FreeFloat FTP Server Buffer Overflow Vulnerability in SYSTEM Command Handler

A critical buffer overflow vulnerability has been identified in FreeFloat FTP Server version 1.0. This issue arises in the SYSTEM Command Handler component, allowing remote attackers to manipulate the command handling process. The vulnerability has been publicly disclosed and could potentially be exploited.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the application to crash.

Reproduction

The vulnerability can be reproduced by connecting to the FTP server on port 21 and logging in with the username and password 'anonymous'. After establishing the connection, the vulnerable SYSTEM command can be issued with a crafted payload that exploits the buffer overflow vulnerability.