Description
Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response.
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://gist.github.com/berkgoksel/e97b3f3b15e2f8293f649d4ebe6a6fc9
Exploit, Third Party Advisory x_refsource_misc
https://gist.github.com/berkgoksel/a654c8cb661c7a27a3f763dee92016aa
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/148383/Core-FTP-LE-2.2-Buffer-Overflow.html
Scores
CVSS v3
9.8
EPSS
0.0695
EPSS Percentile
93.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (1)
coreftp/core_ftp
2.2
Published
Jul 05, 2018
Tracked Since
Feb 18, 2026