k1tk4t has discovered a vulnerability in wzdftpd, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially to compromise a vulnerable system.

The vulnerability is caused due to an off-by-one error within the "do_login_loop()" function in libwzd-core/wzd_login.c. This can be exploited to cause a stack-based buffer overflow with a zero byte by sending an overly long string to the affected server (over 4095 bytes).

The vulnerability is confirmed in version 0.8.2. Other versions may also be affected.

Solution
Update to version 0.8.3.

Provided and/or discovered by
k1tk4t

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/4498

Deep Links
Links available to Secunia VIM customers