Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2020-37208

SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service

Description

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nsasoft Nsauditor SpotFTP FTP Password Recovery

  • 3.0.0.0affected

References