4
CVSSv2

CVE-2014-1443

Published: 02/05/2014 Updated: 02/05/2014
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with a specific length, possibly related to an out-of-bounds read.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

coreftp core ftp 1.2

Exploits

Core FTP Server version 12 suffers from denial of service race condition, password disclosure, and directory traversal vulnerabilities ...