Vulnerabilities (CVE)

Filtered by vendor Coreftp Subscribe
Filtered by product Core Ftp
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3484 1 Coreftp 1 Core Ftp 2017-08-17 9.3 HIGH N/A
Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file. NOTE: some of these details are obtained from third party information.
CVE-2013-3930 1 Coreftp 1 Core Ftp 2014-08-11 9.3 HIGH N/A
Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply.
CVE-2014-4643 1 Coreftp 1 Core Ftp 2014-06-26 5.0 MEDIUM N/A
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in a reply to a (1) USER, (2) PASS, (3) PASV, (4) SYST, (5) PWD, or (6) CDUP command.
CVE-2014-1443 1 Coreftp 1 Core Ftp 2014-05-02 4.0 MEDIUM N/A
Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with a specific length, possibly related to an out-of-bounds read.
CVE-2014-1442 1 Coreftp 1 Core Ftp 2014-05-02 4.0 MEDIUM N/A
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command.
CVE-2014-1441 1 Coreftp 1 Core Ftp 2014-05-02 4.3 MEDIUM N/A
Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice.