His0k4 has discovered a vulnerability in FTPShell Client, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the processing of FTP responses. This can be exploited to cause a stack-based buffer overflow via an overly large PASV response.

Successful exploitation allows execution of arbitrary code, but requires that the user is tricked into connecting to a malicious FTP server.

The vulnerability is confirmed in version 4.1 RC2. Other versions may also be affected.

Solution
Do not connect to untrusted FTP servers.

Provided and/or discovered by
His0k4

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/9613

Deep Links
Links available in Customer Area