PT-2019-19851 · Ftpgetter · Ftpgetter Standard

W4Fz5Uck5 · Published 2019-03-14 · Updated 2021-07-21 · CVE-2019-9760

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FTPGetter Standard version 5.97.0.177

Description The issue allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. Additionally, long responses can cause the FTP client to crash due to memory corruption.

Recommendations For version 5.97.0.177, consider disabling the FTP connection feature until a patch is available to prevent remote code execution and memory corruption issues. Restrict access to untrusted FTP servers to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-9760

Affected Products

Ftpgetter Standard

References · 4

• 🔥 https://github.com/w4fz5uck5/FTPGetter/blob/master/xpl.py · Exploit
• 🔥 https://exploit-db.com/exploits/46543 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9760 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9760 · Vendor Advisory