critical9.8Public exploit code
CVE-2018-7573
An issue was discovered in FTPShell Client 6.7.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FTPShell Client 6.70 (Enterprise Edition) - Stack Buffer Overflow (Metasploit)2018-07-02 · remote · windows · Verified
- FTPShell Client 6.7 - Buffer Overflow2018-05-08 · remote · windows · Verified
Impact
An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ftpshell | Ftpshell Client | Version 6.70 |