Description (CNA)
Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with an oversized buffer. Attackers can send a PBSZ command with a payload exceeding 211 bytes to trigger an access violation and crash the FTP server process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Coreftp / Core FTP | affected 2.0 |
CWE
CWE-306
References
- https://www.exploit-db.com/exploits/46532
- http://www.coreftp.com/
- http://coreftp.com/server/download/archive/CoreFTPServer653.exe
- https://www.vulncheck.com/advisories/core-ftp-build-653-pbsz-unauthenticated-denial-of-service
ADP enrichment
No English description supplied.
No references supplied.