CVE:CVE-2011-5012
CNNVD:CNNVD-201112-452
Reflection FTP Client中存在基于堆的缓冲区溢出漏洞。远程FTP服务器可借助响应LIST命令中的超长目录名称执行任意代码。Attachmate Reflection 2008版本，Reflection 15.3.2.569之前的2011 R1版本，R1 SP1版本，Reflection 15.4.1.327之前的2011 R2版本，Reflection Windows Client hotfix 7.2.1186之前的7.2 SP1版本以及Reflection 14.1.1.206之前的14.1 SP1版本中存在漏洞。
solution:Upgrade attachmate reflection to a higher version than 7.2:sp1,14.1:sp1,and avoid the version 7.2:sp1,14.1:sp1; Upgrade attachmate reflection_2008 to a higher version than *; Upgrade attachmate reflection_2008r1 to a higher version than sp1,and avoid the version sp1; Upgrade attachmate reflection_2008r2 to a higher version than *; Upgrade attachmate reflection_2011r1 to a higher version than *