PCMan's FTP Server is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
An attacker could exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Information
Exploit
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
References:
- PCMan FTP Server 2.0 CDUP Remote Buffer Overflow (packetstormsecurity.com)
- PCMan's FTP Server Product Page (Paul Kocher)