vendor:
LeapFTP
by:
corelanc0d3r, nullthreat
7.5
CVSS
HIGH
Buffer Overflow
CWE
Product Name: LeapFTP
Affected Version From: 3.0.1
Affected Version To: 3.0.1
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows
2010
LeapFTP 3.0.1 Stack Buffer Overflow
This module exploits a buffer overflow in the LeapFTP 3.0.1 client. This issue is triggered when a file with a long name is downloaded/opened.
Mitigation:
Upgrade to a version of LeapFTP that is not vulnerable to this issue. As a general best practice, always keep software up to date with the latest security patches.
