CVE-2014-1441 Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the e...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| coreftp core ftp | = 1.2 | No fix listed |
References
- coreftp.com vendor-advisory
- packetstormsecurity.com exploit
- 20140205 Core FTP Server Vulnerabilities exploit mailing-list
- 56850 third-party-advisory vendor-advisory
- 102966 vdb-entry