Description
Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long request.
References
- http://www.autistici.org/fdonato/advisory/WinFtpServer1.6.8-adv.txt
- win-ftp-log-scr-bo(21873) vdb-entry
- 14581 vdb-entry
- 16461 third-party-advisory
- 20050817 Unicode Buffer Overflow in WinFtp Server 1.6.8 mailing-list
- 20050817 Unicode Buffer Overflow in WinFtp Server 1.6.8 mailing-list