FTP Shell Server 6.83 Buffer Overflow via Account Name

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute calc.exe or other commands.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

跨界内存写

FTP Shell Server 缓冲区错误漏洞

FTP Shell Server是FTP Shell公司的一款安全文件传输服务器软件。 FTP Shell Server 6.83版本存在缓冲区错误漏洞，该漏洞源于要禁止的账户名字段存在缓冲区溢出，可能导致本地攻击者通过提供特制字符串执行任意代码。

N/A

N/A