CVE-2019-25654

Katalog CVE

CVSS 7.5 · High EPSS 0,69%

Kerentanan Out-of-bounds Write pada coreftp core ftp. Skor CVSS 3.1 7.5 (High) menurut vulncheck.com.

Deskripsi (NVD)

Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to trigger an application crash and deny service.

Rincian

Terbit di NVD

30 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,69% peluang dieksploitasi; lebih tinggi dari 51,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/core-ftp-sftp-server-denial-of-service-via-buffer-overflow advisory pihak ketiga
• https://www.exploit-db.com/exploits/46371 exploit · vdb entry
• http://www.coreftp.com/ product
• http://www.coreftp.com/server/download/archive/CoreFTPServer589.42.exe product