Secunia Research has discovered a vulnerability in FileCOPA, which can be exploited by malicious users to compromise a vulnerable system. The vulnerability is caused due to an integer underflow error in the FTP service (filecpnt.exe) when processing directory arguments passed to certain FTP commands (e.g. “CWD”, “DELE”, “MDTM”, and “MKD”). This can be exploited to cause a stack-based buffer overflow by passing a specially crafted, overly long argument to one of the affected FTP commands. Successful exploitation allows execution of arbitrary code. Versions below 1.01 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48580/secunia-FileCOPA.txt
Source: https://packetstormsecurity.com/files/48580/secunia-FileCOPA.txt.html