Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2020-37155

Core FTP Lite 1.3 - Denial of Service (PoC)

Description

Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Core FTP Core FTP Lite

  • 1.3c Build 1437affected

References