Re: FTP.exe risk:low

["Chris ." <jslat () hotmail com>]

> There are a lot of unchecked buffers in FTP.exe (client) try:
>
> C:\>ftp
> ftp> put
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
[....]
>

> This is not an important security problem but it makes you think about
> microsoft developers...
>
>
>
> Eliel C. Sardañons


I tried this, win2k 5.00.2195 / IIS 5.0 FTPd and got the same results

C:\>ftp localhost
Connected to localhost.
220 Microsoft FTP Service (Version 5.0).
User (localhost:(none)): test1
331 Password required for test1.
Password:
230 User test1 logged in.
ftp> put AAAAAAAAAAAAA

[.....]

AAAAAAAAAAA<CR>

C:\>

Event Logs show the following

Application popup: ftp.exe - Application Error : The instruction at 
"0x77f8c493" referenced memory at "0x41414145". The memory could not be 
"read".




_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com