CVE-2020-8416

HIGH

BearFTP < 0.2.0 - Denial of Service via PASV Mode Connection Flood

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-8416. PoCs published by kolya5544.

AI-analyzed exploit summary This exploit demonstrates a Denial of Service (DoS) attack against BearFTP versions 0.0.1 to 0.1.0 by flooding the server with PASV connections, causing resource exhaustion. The PoC spawns multiple threads to establish persistent connections, overwhelming the server's capacity.

Description

IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to the PASV mode port.

Exploits (1)

exploitdb WORKING POC

by kolya5544 · doslinux

https://www.exploit-db.com/exploits/47987

View Code ZIP pw:eip

This exploit demonstrates a Denial of Service (DoS) attack against BearFTP versions 0.0.1 to 0.1.0 by flooding the server with PASV connections, causing resource exhaustion. The PoC spawns multiple threads to establish persistent connections, overwhelming the server's capacity.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: BearFTP v0.0.1 - v0.1.0

No auth needed

Prerequisites: Network access to the target BearFTP server · Knowledge of the target's hostname and PASV port

MITRE ATT&CK