vendor:
Golden FTPd
by:
EvILduDe
7.5
CVSS
HIGH
Remote Root Exploit
CWE
Product Name: Golden FTPd
Affected Version From: 2.52.0.0
Affected Version To: 2.52.0.0
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows XP SP0 Rus
2004/2005
golden ftp 2.52.0.0 remote r00t exploit
This exploit allows an attacker to gain remote root access by exploiting a stack overflow vulnerability in Golden FTPd. The exploit code binds port 4444 on the remote machine. If the return address is not correct, the FTPd will crash and the administrator will have trouble restarting it. The code must be executed, and the FTPd must be restarted or shutdown for it to work.
Mitigation:
To mitigate this vulnerability, it is recommended to update to a patched version of Golden FTPd or switch to a different FTP server software.