CVE-2014-4643

Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in a reply to a (1) USER, (2) PASS, (3) PASV, (4) SYST, (5) PWD, or (6) CDUP command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
coreftpcore_ftp
2.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/show/osvdb/108051
http://packetstormsecurity.com/files/127075/Core-FTP-LE-2.2-Heap-Overflow.html
http://secunia.com/advisories/58818
http://www.exploit-db.com/exploits/33713
http://osvdb.org/show/osvdb/108051
http://packetstormsecurity.com/files/127075/Core-FTP-LE-2.2-Heap-Overflow.html
http://secunia.com/advisories/58818
http://www.exploit-db.com/exploits/33713