Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2019-25654

Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow

Description

Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to trigger an application crash and deny service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Coreftp Core FTP/SFTP Server

  • v2-Build 673affected

References