ArGoSoft FTP Server RNTO Command Remote Buffer Overflow Vulnerability

ArGoSoft FTP Server RNTO Command Remote Buffer Overflow Vulnerability

ArGoSoft FTP Server is prone to a buffer-overflow vulnerability when handling data through the RNTO command.

Reportedly, passing excessive data in the Unicode format may overflow a finite-sized internal memory buffer. A successful attack may result in memory corruption as memory adjacent to the buffer is overwritten with user-supplied data.

This issue may lead to a denial-of-service condition or the execution of arbitrary code.

Version 1.4.3.6 of ArGoSoft FTP Server is vulnerable to this issue; other versions may also be affected.