FTPShell Client 6.7 Buffer Overflow

-- coding: utf-8 -- Exploit Title: FTPShell Client 6.7 - Remote Buffer Overflow Date: 2018-01-03 Exploit Author: SebastiA!n Castro @r4wd3r Vendor Homepage: http://www.ftpshell.com/index.htm Software Link: http://www.ftpshell.com/download.htm Version: 6.7 Tested on: Windows Server 2008 R2 x64,...

CVE-2018-7573

An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465...

CVE-2018-7573

Summary (CVE-2018-7573) : The FTPShell Client v6.7 contains a stack-based buffer overflow triggered by a remote FTP server sending 400 consecutive 'F' characters in combination with an FTP 220 response. This overflow enables arbitrary code execution on the victim machine. Related advisories and e...