A stack-based buffer overflow in Nsauditor FTP Password Recover 2.4.8 allows an unauthenticated attacker to crash the application, resulting in a denial of service.

The application fails to properly validate input length when processing registration codes, leading to a stack-based buffer overflow (CWE-121). An attacker can trigger this vulnerability by providing a crafted string of 1000 characters into the registration code input field, causing the process to terminate.

Successful exploitation results in a denial of service, which renders the application unusable and disrupts any associated file transfer or password recovery operations. While the CVSS score of 7.5 indicates a high severity, the impact is localized to the specific instance of the application running on an endpoint. This vulnerability poses a risk to operational continuity for users relying on this software for administrative tasks.

Immediate Action: As no official patch is available, users should restrict access to the application and avoid entering untrusted registration codes. Discontinuing use of the software is recommended if a secure alternative exists.

Proactive Monitoring: Security teams should monitor endpoint application logs for unexpected termination events or crash reports associated with the Nsauditor process.

Compensating Controls: Implement endpoint security policies that restrict the execution of unauthorized or legacy software to minimize the attack surface.

Public Exploit Available: Yes, a proof-of-concept script is available via Exploit-DB (EDB-ID: 48132).

Given the lack of a vendor-provided patch and the availability of a public proof-of-concept, users are advised to exercise caution and limit the use of this software in production environments. Organizations should prioritize migrating to a supported and actively maintained FTP utility to eliminate the risk posed by this unpatched buffer overflow.