CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 漏洞利用 专业漏洞分析与完整的远程缓冲区溢出利用 🎯 项目亮点 完整的真实案例研究 ：CVE-2025-5548（FreeFloat FTP Server 1.0 中通过 NOOP 命令触发的远程基于栈的缓冲区溢出） 手动工具安装 + 自动化脚本（Windows 和 Linux） 在 Windows 11 虚拟机上完整记录的实验环境 逐步漏洞利用 ：模糊测试 → 偏移量 → 坏字符 → JMP ESP → 可用的反向 shell 📂 仓库结构...

CVE-2025-5548-POC

CVE-2025-5548-POC 脆弱性の説明 CVE-2025-5548 は、Windows システム向けのレガシー FTP サービスである FreeFloat FTP Server で特定されたスタックバッファオーバーフロー型の脆弱性です。この欠陥は NOOP コマンドのハンドラに存在し、スタック上の固定サイズバッファへ入力をコピーする前に、入力サイズの検証を行いません。これにより、リモートの攻撃者が事前認証なしで過大なサイズの文字列を送信し、EIP レジスタを上書きして、任意のコードへ実行フローをリダイレクトすることが可能になります。 タイプ: スタックバッファオーバーフロー...

CVE-2025-5548

脆弱性の悪用と分析 ドキュメントの目的: ラボ環境の展開中に得られた知識を振り返り、CVE-2025-5548の悪用プロセスを詳細に説明し、未知の脆弱性（ゼロデイ）の調査への次のステップを検討します。 1. 脆弱性探索に対する私の見解 このモジュールを通じて、エクスプロイトの開発は外科手術のような精密作業であることを実感しました。自動スキャナーを適当に実行するのではなく、コンピュータが内部でどのように情報を処理するかを理解することが重要です。 実際の作業サイクルは3つの柱に基づいていることを学びました：観察...

CVE-2025-5548

Rompiendo FreeFloat FTP: análisis y explotación de CVE-2025-5548 Anderson Steven — Máster en Ciberseguridad, Módulo 6 Vulnerabilidades Entrega individual: Metodología de análisis de vulnerabilidades y explotación Por qué este repositorio No quería entregar simplemente "aquí está el exploit...

CVE-2025-5548

CVE-2025-5548 CVE-2025-5548 のセキュリティ調査と技術分析。FreeFloat FTP Server 1.0 に影響するバッファオーバーフローの脆弱性です。 このリポジトリは、安全なラボ環境内での脆弱性の挙動、攻撃対象領域の分析、管理された概念実証テスト、および防御的な観察結果を文書化しています。 概要 CVE-2025-5548 は、NOOP コマンドを通じてトリガーされる FreeFloat FTP Server 1.0 のバッファオーバーフロー脆弱性です。 ユーザーが提供する入力に対する境界チェックが不適切なため、攻撃者は過大なペイロードを送信し、FTP...

RockyLinux 9 : dovecot (RLSA-2026:19364)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19364 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...

RLSA-2026:19364 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

ALSA-2026:19149 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

RHEL 10 : dovecot (RHSA-2026:19149)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19149 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

ALSA-2026:19364 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

RHEL 8 : dovecot (RHSA-2026:18053)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:18053 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...