The server must either have anonymous access rights or an attacker must have an account. FTP Session was initiated from an NT Machine. The following Example was tested on Wondows NT 5.0 beta 2 ftp client, Windows 9x and NT 4.0 ftp clients will not allow you to overflow the buffer from the command prompt, and you will have to code your own NLST command to perform the buffer overflow. 200 PORT command successful. The above example uses 316 characters to overflow.
Lets take a look at the server side happenings.
The instruction at '0x710f8aa2' referenced memory at '0x41414156'. The memory could not be 'read'. Connection closed by remote host. Lets take a look once again at the server side. This is looking mighty interesting.