Description
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 2 modules
-
PCMAN FTP Server Buffer Overflow - PUT Command
exploit/windows/ftp/pcman_put
-
PCMAN FTP Server Post-Authentication STOR Command Stack Buffer Overflow
exploit/windows/ftp/pcman_stor
Exploit-DB 10
- PCMan FTP Server 2.0.7 - 'RENAME' Remote Buffer Overflow EDB-38013 · remote · Aug 29, 2015 · verified
- PCMan FTP Server 2.0.7 - 'MKD' Remote Buffer Overflow EDB-36078 · remote · Feb 14, 2015
- PCMan FTP Server 2.07 - Remote Buffer Overflow EDB-31789 · remote · Feb 20, 2014 · verified
- PCMan FTP Server 2.07 - 'ABOR' Remote Buffer Overflow EDB-31254 · remote · Jan 29, 2014 · verified
- PCMan FTP Server 2.07 - 'CWD' Remote Buffer Overflow EDB-31255 · remote · Jan 29, 2014 · verified
- PCMan FTP Server 2.07 - 'STOR' Remote Stack Overflow (Metasploit) EDB-28328 · remote · Sep 17, 2013
- PCMan FTP Server 2.07 - 'STOR' Remote Buffer Overflow EDB-27703 · remote · Aug 19, 2013 · verified
- PCMan FTP Server 2.07 - 'PASS' Remote Buffer Overflow EDB-27277 · remote · Aug 2, 2013 · verified
- PCMan FTP Server 2.0.7 - Remote (Metasploit) EDB-27007 · remote · Jul 22, 2013 · verified
- PCMan FTP Server 2.0 - Remote Buffer Overflow EDB-26495 · remote · Jun 30, 2013
GitHub 1 repository
-
t0rt3ll1n0/PCmanBoF ★ 2 · Nov 12, 2020
A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 60837 vdb-entry
- 94624 vdb-entry
- 26471 exploit
- http://infosec42.blogspot.com/2013/06/unauthenticated-pcman-ftp-207-buffer.html