module

EasyFTP Server LIST Command Stack Buffer Overflow

Disclosed
2010-07-05
Created
2018-05-30

Description

This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11.
credit goes to Karn Ganeshan.

NOTE: Although, this is likely to exploit the same vulnerability as the
'easyftp_cwd_fixret' exploit, it uses a slightly different vector.

Authors

Karn Ganeshan karnganeshan@gmail.com
MFR
jduck jduck@metasploit.com

Platform

Windows

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use exploit/windows/ftp/easyftp_list_fixret
msf exploit(easyftp_list_fixret) > show targets
...targets...
msf exploit(easyftp_list_fixret) > set TARGET < target-id >
msf exploit(easyftp_list_fixret) > show options
...show and set options...
msf exploit(easyftp_list_fixret) > exploit

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.