A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250716.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
| Link | Tags |
|---|---|
| https://vuldb.com/?id.250716 | vdb entry third party advisory permissions required |
| https://vuldb.com/?ctiid.250716 | signature third party advisory permissions required |
| https://www.exploit-db.com/exploits/17354 | vdb entry third party advisory exploit |