PT-2019-19851 · Ftpgetter · Ftpgetter Standard

W4Fz5Uck5 · Publicado 2019-03-14 · Atualizado 2021-07-21 · CVE-2019-9760

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FTPGetter Standard version 5.97.0.177

Description The issue allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. Additionally, long responses can cause the FTP client to crash due to memory corruption.

Recommendations For version 5.97.0.177, consider disabling the FTP connection feature until a patch is available to prevent remote code execution and memory corruption issues. Restrict access to untrusted FTP servers to minimize the risk of exploitation.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-9760

Produtos afetados

Ftpgetter Standard

Referências · 4

• 🔥 https://github.com/w4fz5uck5/FTPGetter/blob/master/xpl.py · Exploit
• 🔥 https://exploit-db.com/exploits/46543 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9760 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9760 · Aviso do Fabricante