SnapFiles Whisper FTP Surfer Long File Name Remote Buffer Overflow Vulnerability

Bugtraq ID:	10761
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 20 2004 12:00AM
Updated:	Jul 20 2004 12:00AM
Credit:	Discovery is credited to Komrade <[email protected]>.
Vulnerable:	SnapFiles Whisper FTP Surfer 1.0.7
Not Vulnerable:

SnapFiles Whisper FTP Surfer Long File Name Remote Buffer Overflow Vulnerability

Whisper FTP Surfer is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application when handling long file names.

This issue affects Whisper FTP Surfer 1.0.7, however, other versions may be vulnerable as well.

SnapFiles Whisper FTP Surfer Long File Name Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SnapFiles Whisper FTP Surfer Long File Name Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SnapFiles Whisper FTP Surfer Long File Name Remote Buffer Overflow Vulnerability

References:

• Whisper FTP Surfer Product Page (SnapFiles)
  
• Buffer overflow in Whisper FTP Surfer 1.0.7 (Komrade )