This Metasploit module exploits a buffer overflow vulnerability found in the PUT command of the PCMAN FTP server version 2.0.7. This requires authentication but by default anonymous credentials are enabled.
860df3259810620f34c556a18da76a197f8c3e0724e8476d20abc5f9f70ce870
PCMAN FTP version 2.07 ABOR command buffer overflow exploit.
207aacc82b71408ec13209815ed8aa5c33dcdd9974eff7bed97d008df270fc01
PCMAN FTP version 2.07 CWD command buffer overflow exploit.
686e1bb139fa8ceb51129b6bcc62b9df3c56b058ab7375350cf467d34d7e74da
This Metasploit module exploits a buffer overflow vulnerability found in the STOR command of the PCMAN FTP version 2.07 server when the "/../" parameters are also sent to the server. Please note authentication is required in order to trigger the vulnerability. The overflowing string will also be seen on the FTP server log console.
aff42bc0d13d90c28ae3e11d84b0970e7da59f5d0794391bf2eda1629b411de3