CVEs-PoC/2010/CVE-2010-10014.md

CVE-2010-10014

Description

Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious FTP server can send an overly long filename in the directory listing, which overflows a fixed-size stack buffer in the client and overwrites the Structured Exception Handler (SEH). This allows remote attackers to execute arbitrary code on the client system.

POC

Reference

• https://www.exploit-db.com/exploits/16716
• https://www.vulncheck.com/advisories/odin-secure-ftp-stack-buffer-overflow-via-list-response

Github

No PoCs found on GitHub currently.