LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow

vendor:

LeapFTP

by:

Patrick Webster

7.5

CVSS

HIGH

Buffer Overflow

119

CWE

Product Name: LeapFTP

Affected Version From: 2.7.3.600

Affected Version To: 2.7.3.600

Patch Exists: NO

Related CWE: CVE-2003-0558

CPE: a:leapware:leapftp:2.7.3.600

Metasploit:

Other Scripts:

Platforms Tested: Windows

2003

This module exploits a buffer overflow in the LeapWare LeapFTP v2.7.3.600 client that is triggered through an excessively long PASV reply command.

Update to a patched version of LeapFTP.

Source