CVE-2014-4643 Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application crash) and possibly execute arbitrary code via a lon...
MediumCVSS 5.0
EPSS 8.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in a reply to a (1) USER, (2) PASS, (3) PASV, (4) SYST, (5) PWD, or (6) CDUP command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| coreftp core ftp | = 2.2 | No fix listed |
References
- 108051 vdb-entry
- packetstormsecurity.com exploit
- 58818 third-party-advisory
- 33713 exploit