PT-2018-4166 · Core Ftp · Core Ftp Server

Publicado 2018-03-20 · Atualizado 2018-10-09 · CVE-2014-1215

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Core FTP Server versions prior to 1.2 build 508

Description The issue is related to multiple buffer overflows that can be exploited by local users to gain privileges. This is achieved through vectors related to reading data from config.dat and the Windows Registry.

Recommendations For versions prior to 1.2 build 508, update to version 1.2 build 508 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-1215

Produtos afetados

Core Ftp Server

Referências · 3

• https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1215 · Nota
• http://securityfocus.com/archive/1/531144/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1215 · Nota de Segurança