GlobalScape CuteFTP Clipboard URL Buffer Overflow Vulnerability

Bugtraq ID:	6786
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 06 2003 12:00AM
Updated:	Feb 06 2003 12:00AM
Credit:	Reported by Kanatoko <[email protected]>.
Vulnerable:	globalSCAPE CuteFTP 5.0.1 globalSCAPE CuteFTP 5.0
Not Vulnerable:	globalSCAPE CuteFTP 5.0.2

GlobalScape CuteFTP Clipboard URL Buffer Overflow Vulnerability

GlobalScape CuteFTP is prone to a buffer overflow when unusually long URLs are copied into the clipboard. Causing this buffer to be overrun will result in CuteFTP failing.

GlobalScape CuteFTP Clipboard URL Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

GlobalScape CuteFTP Clipboard URL Buffer Overflow Vulnerability

Solution:
The vendor has released an upgrade to addresses this issue. Users are advised to uninstall CuteFTP version 5.0.1, 5.0 or earlier and install CuteFTP version 5.0.2.

Fix available:


globalSCAPE CuteFTP 5.0

• globalSCAPE CuteFTP Version 5.0.2
  ftp://ftp.cuteftp.com/pub/cuteftp

globalSCAPE CuteFTP 5.0.1

• globalSCAPE CuteFTP Version 5.0.2
  ftp://ftp.cuteftp.com/pub/cuteftp

GlobalScape CuteFTP Clipboard URL Buffer Overflow Vulnerability

References:

• Re: CuteFTP 5.0 XP, Buffer Overflow (Kanatoko )
  
• Re: CuteFTP 5.0 XP, Buffer Overflow ()