A critical local buffer overflow vulnerability in FTPShell Server 6.83 allows an attacker to achieve arbitrary code execution on the host system.

This is a buffer overflow (CWE-787) occurring in the Account name to ban field within the Manage FTP Accounts dialog. The vulnerability allows an unauthenticated local attacker to overwrite the return address by injecting a specially crafted string, resulting in arbitrary code execution.

The ability to execute arbitrary code locally poses a severe risk to system integrity and confidentiality. An attacker could leverage this flaw to gain full control over the affected server, leading to unauthorized data access, privilege escalation, or the complete compromise of the host machine. Given the CVSS score of 8.4, this vulnerability is categorized as High severity, necessitating immediate attention to prevent potential exploitation.

Immediate Action: Update to the latest version of FTPShell Server provided by the vendor, as older versions like 6.83 are confirmed to be vulnerable.

Proactive Monitoring: Review system logs for signs of anomalous process execution or unexpected crashes within the FTPShell service management interface.

Compensating Controls: Restrict physical and remote access to the server to only authorized administrators, and ensure that the Manage FTP Accounts dialog is not accessible to untrusted local users.

Public Exploit Available: Yes — a functional exploit and proof-of-concept are available via Exploit-DB (EDB-ID: 46685).

This vulnerability represents a significant security risk due to the availability of a public exploit and the potential for total system compromise. IT administrators should prioritize upgrading the affected software to a patched version immediately. If an update is not immediately feasible, restrict access to the server management interface to prevent local users from interacting with the vulnerable field.