A critical local buffer overflow vulnerability in the zFTP Client allows unauthenticated local attackers to execute arbitrary code with user privileges.

This is an out-of-bounds write vulnerability (CWE-787) triggered by supplying an oversized NAME value to the FTP connection handler. The application fails to perform adequate bounds checking on the 80-byte buffer, allowing an attacker to overwrite the instruction pointer and gain control over the execution flow.

Successful exploitation of this vulnerability allows a local attacker to execute arbitrary code with the privileges of the user running the zFTP client. This could lead to a complete compromise of the local user session, unauthorized access to sensitive data transmitted via the client, and potential escalation of privileges if the client is executed by a privileged user. Given the CVSS score of 8.4, this represents a significant risk to the integrity and confidentiality of local systems.

Immediate Action: Users should immediately update the zFTP client to a version that addresses this buffer overflow or discontinue use of the software if no patched version is available.

Proactive Monitoring: Security teams should monitor system logs for unusual process crashes or unauthorized execution attempts involving the zFTP binary.

Compensating Controls: Ensure that the zFTP binary is executed with the least privilege necessary, and consider implementing mandatory access control (MAC) policies to restrict the ability of the application to execute arbitrary shellcode.

Public Exploit Available: Yes, a published proof-of-concept exploit exists and is documented in the Exploit-DB entry 40203.

The presence of a publicly available exploit for this buffer overflow vulnerability makes it a high-priority item for remediation. Organizations still utilizing the affected version of the zFTP client should prioritize patching or replacing the software immediately to prevent local code execution. Failure to address this vulnerability leaves systems susceptible to trivial exploitation by local users.