YATinyWinFTP Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in YATinyWinFTP version 0.0.5. This vulnerability allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space, which triggers a buffer overflow and causes the service to crash.

Impact

Exploitation of this vulnerability leads to a crash of the FTP service, causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by connecting to the FTP service and sending a command that includes a 272-byte buffer with a trailing space. This can be done using a simple Python script that creates a socket connection to the FTP server, sends the malformed command, and then closes the connection.