Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via (1) a long response to a PWD command, which triggers a stack-based overflow, and (2) a long line in a response to a file LIST command, which triggers a heap-based overflow.
AV:N/AC:H/Au:N/C:C/I:C/A:CSmartftp
APPSmartftpβ€ 1.0.973
Related vulnerabilities
Unspecified vulnerability in SmartFTP before 4.0 Build 1142 allows attackers to have an unknown impact via a l...
Directory traversal vulnerability in SmartSoft Ltd SmartFTP Client 4.0.1124.0, and possibly other versions bef...
Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a larg...
SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the...
SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash ...