Buffer Overflow Vulnerability in CuteFTP 5.0 XP by Globalscape

CVE-2018-25366

What is CVE-2018-25366?

CuteFTP 5.0 XP is susceptible to a buffer overflow vulnerability that can be exploited by local attackers. By injecting a malicious payload into the Site Manager label field, an attacker can exceed a buffer limit of 520 bytes. This overflow allows the attacker to overwrite the return address, facilitating the execution of arbitrary code. Successful exploitation occurs when a crafted shortcut is created and subsequently launched, potentially compromising the security of the affected system. Users of CuteFTP 5.0 XP should exercise caution and consider updating to mitigate the risk.

References