critical10.0Public exploit code
CVE-2013-4730
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PCMan FTP Server 2.0.7 - 'RENAME' Remote Buffer Overflow2015-08-29 · remote · windows · Verified
- PCMan FTP Server 2.07 - Remote Buffer Overflow2014-02-20 · remote · windows · Verified
- PCMan FTP Server 2.07 - 'CWD' Remote Buffer Overflow2014-01-29 · remote · windows · Verified
- PCMan FTP Server 2.07 - 'ABOR' Remote Buffer Overflow2014-01-29 · remote · windows · Verified
- PCMan FTP Server 2.07 - 'STOR' Remote Buffer Overflow2013-08-19 · remote · windows · Verified
- PCMan FTP Server 2.07 - 'PASS' Remote Buffer Overflow2013-08-02 · remote · windows · Verified
- PCMan FTP Server 2.0.7 - Remote (Metasploit)2013-07-22 · remote · windows · Verified
- PCMan FTP Server 2.0.7 - 'MKD' Remote Buffer Overflow2015-02-14 · remote · windows
- PCMan FTP Server 2.07 - 'STOR' Remote Stack Overflow (Metasploit)2013-09-17 · remote · windows
- PCMan FTP Server 2.0 - Remote Buffer Overflow2013-06-30 · remote · windows
Impact
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pcman | Ftp Server | Version 2.0.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://infosec42.blogspot.com/2013/06/unauthenticated-pcman-ftp-207-buffer.html
- http://osvdb.org/show/osvdb/94624
- http://www.exploit-db.com/exploits/26471
- http://www.securityfocus.com/bid/60837
- http://infosec42.blogspot.com/2013/06/unauthenticated-pcman-ftp-207-buffer.html
- http://osvdb.org/show/osvdb/94624
- http://www.exploit-db.com/exploits/26471
- http://www.securityfocus.com/bid/60837