vendor:
FTPShell Client
by:
zec
7.5
CVSS
HIGH
Stack Overflow
121
CWE
Product Name: FTPShell Client
Affected Version From: 4.1 RC2
Affected Version To: 4.1 RC2
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows XP SP3
FTPShell Client, Name Session Stack Overflow Exploit
This exploit targets the FTPShell Client version 4.1 RC2 on Windows XP SP3. It exploits a stack overflow vulnerability in the 'Name Session' feature of the program. The exploit code contains a shellcode for executing the 'calc.exe' program. The exploit is coded by 'zec' and can be contacted at zec@bsdmail.com.
Mitigation:
Update to a patched version of the FTPShell Client.