Xlight FTP Server Stack Buffer Overflow Vulnerability Leading to Denial-of-Service

A stack buffer overflow vulnerability has been identified in Xlight FTP Server version 3.9.3.6. This vulnerability resides in the 'Execute Program' configuration, where an attacker can insert 294 characters into the program execution settings. The overflow leads to a crash of the application, causing a denial-of-service condition.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition.

Reproduction

To reproduce this vulnerability, download and install Xlight FTP Server 3.9.3.6. After installation, navigate to the 'Execute Program' configuration within the server settings. Insert 294 characters into the program execution field. The application will crash, demonstrating the buffer overflow vulnerability.