Sploitus

Exploit for PCMan FTP Server MKD buffer overflow

saint · 2015-03-11

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=SAINT:7F3A14152EAEEFC057D14EB15D55A2FF
Added: 03/11/2015  
CVE: [CVE-2013-4730](<https://vulners.com/cve/CVE-2013-4730>)  
BID: [60837](<http://www.securityfocus.com/bid/60837>)  
OSVDB: [94624](<http://www.osvdb.org/94624>)  


### Background

[PCMan's FTP Server](<http://pcmanftpd.sourceforge.net/>) is a free FTP server for Windows. 

### Problem

A buffer overflow vulnerability in PCMan's FTP Server allows remote attackers to execute arbitrary commands. 

### Resolution

There is no known fix for this vulnerability. Use a different FTP server, or block access to port 21 at the firewall. 

### References

<http://osvdb.org/show/osvdb/94624>  


### Limitations

Exploit works on PCMan's FTP Server 2.0.7 on Windows XP SP3. 

### Platforms

Windows XP