FTPShell Server Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in FTPShell Server version 6.83. This vulnerability allows local attackers to cause the application to crash by entering an excessively long string in the account name field. The denial-of-service condition can be triggered by pasting a 417-byte payload into the 'Account name to ban' parameter within the Manage FTP Accounts interface.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash.

Reproduction

To reproduce this vulnerability, open FTPShell Server 6.83 and navigate to the 'Manage FTP Accounts' section. Select 'Add Account Name' and paste a 417-byte payload into the 'Account name to ban' field. Click 'Ok' to trigger the crash.