header-logo
Suggest Exploit
vendor:
Golden FTP Server Pro
by:
c0d3r
9
CVSS
CRITICAL
Remote stack buffer overflow
119
CWE
Product Name: Golden FTP Server Pro
Affected Version From: 2.5.0.0
Affected Version To: 2.5.0.0
Patch Exists: NO
Related CWE:
CPE: golden-ftp-server-pro
Metasploit:
Other Scripts:
Platforms Tested: Windows XP
2005

Golden FTP Server Pro remote stack BOF exploit

This exploit allows an attacker to execute arbitrary code on a vulnerable Golden FTP Server Pro version 2.5.0.0 and prior. By sending a specially crafted overflow string to the server, an attacker can gain a shell on port 4444. The exploit has been tested on Windows XP SP1 and SP2. Restarting the server is required after the exploit is successful. The workaround is to upgrade to a newer version or use another FTP server.

Mitigation:

Upgrade to a newer version or use another FTP server.
Source

Exploit-DB raw data: