• info
• discussion
• exploit
• solution
• references

VicFTPS Remote Buffer Overflow Vulnerability

A remote buffer-overflow vulnerability is reported in VicFTPS. This issue occurs because the application fails to properly validate the length of user-supplied strings prior to copying them into finite-sized process buffers.

An attacker can exploit this issue to cause the affected server to crash and may be able to execute arbitrary code in the context of the server process.

VicFTPS versions prior to 5.0 are vulnerable to this issue.