WarFTPd USER-PASS Overflow exploit v1.5 Vulnerability exploited: CVE-1999-0256 - BID-10078 Category: Exploits/Remote This module exploits a buffer overflow and installs a level0 agent into the target host. WarFTPd is a popular FTP server for Windows systems. WarFTPd is vulnerable to a buffer overflow in the way it handles the PASS command. This bug will be exploited in order to install a level0 agent into the target machine.The WarFTPd server will be left inaccessible after successful exploitation.The server must be configured to allow anonymous logins for this exploit to succeed. Supported Systems: Windows 2000 Professional - sp4 (i386) WarFTPd 1.65 This module is included in the latest version of CORE IMPACT, the first automated comprehensive penetration testing product for accurately identifying information security risks. Click here to learn more about the product.