"John Berry" email@example.com
Server similar to FTP.
SEND <1 byte name length>
NDIR <1 byte name length>
RECV <1 byte name length>
STOP Terminate the session
PRNT List files and type/length
REPO <1 byte name length>
When the PRNT command is called the files are bubble sorted by name and any gaps due to files being deleted are filled in. However, the file count is not updated when a file is deleted which allows the PRNT command to later access beyond the valid list of files.
Insufficent bounds checking of an array.
CWE-125 Out-of-bounds Read
The tool authors must deal with the difficulties of bubble sort as well as combine the PRNT command with a prior use of the REPO command.
Curated by Lunge Technology, LLC. Questions or comments? Send us email