CVE-2004-1118 - Inappropriate Spectacled Bear

Description

Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97 as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10 and possibly other applications allows remote attackers to execute arbitrary code via a long filename.

Reference

http://www.securityfocus.com/bid/11721 http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html http://marc.info/?l=bugtraq&m=110114233323417&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/18190