CVE-2013-3930

High

Published: 04/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in Core FTP before version 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply.

Risk Assessment

This vulnerability could lead to remote code execution, posing a significant security risk to systems using this application.

Recommendation

It is recommended to update Core FTP to version 2.2 build 1785 or later to mitigate this vulnerability.

Other vulnerabilities in Core FTP

CVE-2019-25686High
Core FTP 2.0 build 653 has a DoS vulnerability in the PBSZ command. An unauthenticated attacker can send a malformed PBSZ command with a buffer exceeding 211 bytes, triggering an access violation and crashing the FTP server.

Original NVD description (English source)

Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply.