• info
• discussion
• exploit
• solution
• references

WFTPD Server APPE Command Buffer Overflow Vulnerability

WFTPD is prone to a buffer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data before storing it in a finite-sized buffer.

An attacker can exploit this issue to execute arbitrary machine code in the context of the affected server application.

Version 3.23 is reportedly affected by this issue; other versions may also be affected.