Description
Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to trigger an application crash and deny service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Coreftp | Core FTP/SFTP Server | v2-Build 673 | — |
References
- ExploitDB-46371 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow third-party-advisory