header-logo
Suggest Exploit
vendor:
FTPShell Client
by:
zec
7.5
CVSS
HIGH
Stack Overflow
121
CWE
Product Name: FTPShell Client
Affected Version From: 4.1 RC2
Affected Version To: 4.1 RC2
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: Windows XP SP3

FTPShell Client, Name Session Stack Overflow Exploit

This exploit targets the FTPShell Client version 4.1 RC2 on Windows XP SP3. It exploits a stack overflow vulnerability in the 'Name Session' feature of the program. The exploit code contains a shellcode for executing the 'calc.exe' program. The exploit is coded by 'zec' and can be contacted at zec@bsdmail.com.

Mitigation:

Update to a patched version of the FTPShell Client.
Source

Exploit-DB raw data: