CVE-2017-6465
CriticalSummary
A Remote Code Execution vulnerability was discovered in FTPShell Client 6.53. The client by default sends a PWD command to the FTP server it connects to, but it does not check the response's length, leading to a buffer overflow situation.
Risk Assessment
This vulnerability could allow an attacker to execute code remotely on the victim's system, posing a serious security threat to the organization.
Recommendation
It is recommended to update FTPShell Client to the latest version to mitigate this vulnerability and implement additional security measures on the FTP server.
Original NVD description (English source)
Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation.