PT-2021-10370 · Unknown · Core Ftp Server

Pedro Rodrigues + 1 · Published 2021-04-05 · Updated 2021-04-09 · CVE-2020-19595

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Core FTP Server version 2 Build 697

Description: A buffer overflow issue exists due to a crafted username, which can be used to exploit the system.

Recommendations: For Core FTP Server version 2 Build 697, consider updating to a newer version that addresses this issue, if available. As a temporary workaround, restrict access to the server to minimize the risk of exploitation. Avoid using crafted usernames in the affected system until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-19595

Affected Products

Core Ftp Server

References · 3

• 🔥 https://0x90.zone/binary/reverse/exploitation/2020/08/16/CoreFTPServerRCE.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-19595 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-19595 · Security Note