Description
Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional interaction.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Core FTP | Core FTP Lite | 1.3c Build 1437 | — |
References
- ExploitDB-48100 exploit
- Core FTP Official Homepage product
- VulnCheck Advisory: Core FTP Lite 1.3 - Denial of Service (PoC) third-party-advisory