Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2020-36964

YATinyWinFTP - Denial of Service

Description

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ik80 YATinyWinFTP

  • 0.0.5affected

References