vendor:
proftpd
by:
bkbll
9
CVSS
CRITICAL
FTP_ProFTPD_Translate_Overflow
Unknown
CWE
Product Name: proftpd
Affected Version From: 1.2.2007
Affected Version To: 1.2.9rc2
Patch Exists: NO
Related CWE: Unknown
CPE: Unknown
Platforms Tested:
2003
proftpd 1.2.7/1.2.9rc2 remote root exploit
This exploit targets the overflow _xlate_ascii_write function in proftpd 1.2.7/1.2.9rc2. It provides a method for remote root access. The code is dirty and there are more beautiful exploits available for this vulnerability. Two methods are provided: bind port and connect back.
Mitigation:
Unknown