Posted: 2008-06-10 05:43
I'm a security professional, working in a reputed security firm. There is a possible overflow in WinSCP-3.8.0. WinSCP is not able to handle long filenames. This is true in case of long filenames of 255 characters long with normal alphanumeric characters and with specially crafted filenames as well. Once you try to copy files with long filenames, a buffer overrun occurs and windows terminates WinSCP instances.
MOB: +91 9822052560
Location: Prague, Czechia
Does the problem occur with the latest version? Also do you use SFTP or SCP? I'm not able to test it myself as I do not have a system available, where such a long filename can be created.
You can post new topics in this forum
And it's free!