Description
YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ik80 | YATinyWinFTP | 0.0.5 | — |
References
- ExploitDB-49127 exploit
- YATinyWinFTP GitHub Repository product
- VulnCheck Advisory: YATinyWinFTP - Denial of Service third-party-advisory