CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 漏洞利用 专业漏洞分析与完整的远程缓冲区溢出利用 🎯 项目亮点 完整的真实案例研究 ：CVE-2025-5548（FreeFloat FTP Server 1.0 中通过 NOOP 命令触发的远程基于栈的缓冲区溢出） 手动工具安装 + 自动化脚本（Windows 和 Linux） 在 Windows 11 虚拟机上完整记录的实验环境 逐步漏洞利用 ：模糊测试 → 偏移量 → 坏字符 → JMP ESP → 可用的反向 shell 📂 仓库结构...

CVE-2025-5548-POC

CVE-2025-5548-POC 漏洞描述 CVE-2025-5548 是 FreeFloat FTP Server（一种用于 Windows 系统的旧版 FTP 服务）中的一个栈缓冲区溢出漏洞。该缺陷位于 NOOP 命令的处理程序中，该程序在将输入复制到堆栈中的固定大小缓冲区之前未进行输入大小验证。这使得未经身份验证的远程攻击者能够发送超长字符串，覆盖 EIP 寄存器并将执行流程重定向到任意代码。 类型： 栈缓冲区溢出 CWE-121 向量： 网络（远程访问，无需身份验证） 影响： 远程代码执行 RCE 受影响服务： FreeFloat FTP Server — TCP/21，NOO...

CVE-2025-5548

漏洞利用与漏洞分析 文档目的： 回顾在部署实验环境过程中获得的知识，详述 CVE-2025-5548 的利用过程，并为未来研究未知漏洞（0day）规划后续步骤。 1. 我对漏洞搜索的看法 在整个模块的学习中，我认识到编写漏洞利用代码是一项需要外科手术般精准的工作。它不是盲目运行自动扫描器然后看能发现什么，而是要理解计算机底层是如何处理信息的。 我学到，真正的工作循环建立在三个支柱上：观察 （使用 Ghidra 等工具对程序代码进行静态分析，寻找危险函数）、交互 （使用 Immunity Debugger 等调试器实时查看内存）以及操纵 （注入数据，直到让程序失去对其正常流程的控制）。...

CVE-2025-5548

攻破 FreeFloat FTP：CVE-2025-5548 的分析与利用 Anderson Steven —— 网络安全硕士，模块 6（漏洞） 个人提交： 漏洞分析与利用方法论 为什么创建这个仓库 我不想只是提交一份“这是可用的 exploit”。这个仓库 记录的是我面对内存破坏漏洞时的工作方式：先看什么、按什么顺序 排除假设、每个阶段使用哪些工具以及为什么。我用 CVE-2025-5548 作为主线，因为它是一个小而易于把握的案例，但这个仓库的核心文档—— METHODOLOGY.md ——不是“如何利用 FreeFloat FTP”的教程，而是我面对任何二进制文件时的推理方式，...

CVE-2025-5548

CVE-2025-5548 对CVE-2025-5548的安全研究和技术分析，这是一个影响FreeFloat FTP Server 1.0的缓冲区溢出漏洞。 此仓库记录了漏洞行为、攻击面分析、受控概念验证测试以及在安全实验室环境中的防御观察。 概述 CVE-2025-5548是FreeFloat FTP Server 1.0 中的一个缓冲区溢出漏洞，通过NOOP命令触发。 对用户提供的输入进行不当的边界检查，允许攻击者发送过大的有效载荷，从而破坏FTP服务中的进程内存。 由于该服务可通过网络访问且无需身份验证，因此可以远程进行利用。 漏洞详情 字段| 值 ---|--- 漏洞类型|...

Astra Linux – Vulnerability in dovecot

Sending the “NOOP ...” command with 4000 opening and closing parentheses results in an additional 1MB of memory usage. Longer commands will cause the client to disconnect. This 1MB of memory can be reserved for longer periods of time by not sending the command that ends with LF. Thus, an attacker...

MiracleLinux 9 : dovecot-2.3.16-18.el9_8 (AXSA:2026-1023:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1023:04 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via...

RockyLinux 9 : dovecot (RLSA-2026:19364)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19364 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...

RLSA-2026:19364 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

RHEL 10 : dovecot (RHSA-2026:19149)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19149 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

ALSA-2026:19364 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

ALSA-2026:19149 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

RHEL 8 : dovecot (RHSA-2026:18053)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:18053 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...