[LeapFTP] "PASV" Reply Buffer Overflow Vulnerability

---------------------------------------------------------------------- SUMMARY : LeapFTP "PASV" Reply Buffer Overflow Vulnerability PRODUCT : LeapFTP VERSIONS : 2.7.3.600 VENDOR : LeapWare http://www.leapware.com/ SEVERITY : Critical. Code Execution. DISCOVERED BY : nesumin AUTHOR : :: Operash ::...

LeapFTP < 2.7.4.x PASV Reply Remote Overflow

The remote host is running LeapFTP - an FTP client. There is a flaw in the remote version of this software that could allow an attacker to execute arbitrary code on this host. To exploit it, an attacker would need to set up a rogue FTP server and have a user on this host connect to it. C Tenable...