CVE-2020-37139

Summary

Odin Secure FTP Expert 7.6.3 contains a local denial of service vulnerability that allows attackers to crash the application by manipulating site information fields. Attackers can generate a buffer overflow by pasting 108 bytes of repeated characters into connection fields, causing the application to crash.

Affected Software

Weaknesses

• CWE-770: Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://www.exploit-db.com/exploits/48262
• http://tr.oldversion.com/windows/odin-secure-ftp-expert-7-6-3
• https://www.vulncheck.com/advisories/odin-secure-ftp-expert-site-info-denial-of-service

• ←Previous
• Next→