CVE-2019-9649

概要

参考情報

• packetstormsecurity.com/files/154205/CoreFTP-Server-MDTM-Directory-Traversal.html
• seclists.org/fulldisclosure/2019/Aug/22
• coreftp.com/forums/viewtopic.php · Product
• securityfocus.com/bid/107449 · Third Party Advisory
• seclists.org/fulldisclosure/2019/Mar/25 · Exploit
• exploit-db.com/exploits/46534 · Exploit

core ftp のその他の脆弱性

• CVE-2019-25686高 7.5Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the ser…
• CVE-2019-25654高 7.5Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively lon…
• CVE-2022-22899中 5.5Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a Denial of Service (DoS) via a crafted packe…
• CVE-2022-22836中 6.5CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.
• CVE-2020-19596緊急 9.8Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username.