Client crash via oversized username field

Buffer overflow in Core FTP LE 2.2 allows local users to crash the client by entering a long username in Setup > Users. The Username edit box accepts an overlong string and copies it without verifying that the destination buffer is large enough, overwriting adjacent memory. Access to the local configuration interface is required; the reported consequence is an application crash, with no documented code execution.