FTP Voyager Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in FTP Voyager version 16.2.0. This vulnerability allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field. By creating a malicious site profile with 500 bytes of repeated characters and pasting it into the IP field, attackers can trigger a buffer overflow that causes the FTP Voyager process to crash.

Impact

Exploitation of this vulnerability leads to a crash of the FTP Voyager application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, create a site profile in FTP Voyager 16.2.0. Inject 500 bytes of repeated characters into the IP field of the site profile. Once the oversized buffer data is pasted, the application will crash, demonstrating the denial-of-service vulnerability.