PT-2018-4166 · Core Ftp · Core Ftp Server

Published 2018-03-20 · Updated 2018-10-09 · CVE-2014-1215

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Core FTP Server versions prior to 1.2 build 508

Description The issue is related to multiple buffer overflows that can be exploited by local users to gain privileges. This is achieved through vectors related to reading data from config.dat and the Windows Registry.

Recommendations For versions prior to 1.2 build 508, update to version 1.2 build 508 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-1215

Affected Products

Core Ftp Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-1215 · Security Note
• https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1215 · Note
• http://securityfocus.com/archive/1/531144/100/0/threaded · Note