KLA10129 ACE vulnerability in Core FTP

A buffer overflow was found in Core FTP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server reply.

Original advisories

Core FTP changelog

Related products

Core-FTP-client

Core-FTP-Server-SFTP-Server

CVE list

CVE-2013-3930 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Core FTP versions before 2.2 build 1785