Core FTP Lite Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in Core FTP Lite version 1.3, specifically in the username input field. This vulnerability allows attackers to crash the application by entering excessively large input. By using a payload of 7000 bytes composed of repeated 'A' characters, the application can be made to crash without any further user interaction.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by entering 7000 bytes of repeated 'A' characters into the username field of Core FTP Lite version 1.3. This input size exceeds the buffer capacity, leading to a crash of the application.