Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FlashFXP PWD命令超长畸形参数远程缓冲区溢出漏洞
Vulnerability Description
FlashFXP是一款流行的FTP客户端。 FlashFXP在处理畸形的命令请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞导致客户端失去响应能力。 如果向FlashFXP所发送的PWD命令包含有多于5420个" \"且被至少一个不同的字符分隔开的话，就会导致应用程序变得不稳定。FlashFXP首先会僵死45秒，耗尽100%的资源；如果用户断开并重新连接到服务器的话，就会导致FlashFXP陷入将数据写入到栈中的死循环。
CVSS Information
N/A
Vulnerability Type
N/A