Vulnerability Development mailing list archives

ftp.exe buffer overflow ?


From: cyber_hunter <cyber_hunter () LINUXBR COM BR>
Date: Sat, 10 Feb 2001 23:44:59 -0800

While I was reading something about wu-ftp I found an interesting buffer
overflow on ftp.exe ,
first logon on any ftp server ( any ), then :

quote site exec %s%s%s%s%s%s

( this will work even if server doesn't support site exec )

and :  "ftp caused an invalid page fault in module MSVCRT.DLL ..."

I don't know if an exploit can be made , and if this would be used for
something.
ps: I have not tried with any ftp client .


Current thread: