GlobalSCAPE Secure FTP Server User Input Overflow
Critical Nessus Plugin ID 18627
SynopsisThe remote FTP server is affected by a buffer overflow vulnerability.
DescriptionThe remote host is running GlobalSCAPE Secure FTP Server.
GlobalSCAPE Secure FTP Server 3.0.2 and prior versions are affected by a buffer overflow due to mishandling the user-supplied input.
An attacker would first need to authenticate to the server before they can execute arbitrary commands.
SolutionUpgrade to GlobalSCAPE Secure FTP 3.0.3 Build 4.29.2005 or later as this reportedly fixes the issue.