Core FTP/SFTP Server Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in Core FTP/SFTP Server version 1.2, specifically in Build 589.42. This vulnerability allows attackers to crash the service by entering an excessively long string, approximately 7000 bytes, into the User domain field. The overflow occurs in the domain configuration, leading to an application crash and denial-of-service condition.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition where the FTP/SFTP service becomes unavailable.

Reproduction

To reproduce this vulnerability, paste a payload of 7000 bytes into the User domain field of the Core FTP/SFTP Server application. After entering the payload, the application will crash, demonstrating the denial-of-service condition.