CVE-2014-4643

Published Jun 25, 2014 CVSS 2.0 · 5.0 Medium EPSS 8.8% KEV · Not listed
Description
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in a reply to a (1) USER, (2) PASS, (3) PASV, (4) SYST, (5) PWD, or (6) CDUP command.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 16, 2024, 11:35 PM
Reserved
Jun 25, 2014, 12:00 AM
Status
Modified
Published
Jun 25, 2014, 8:55 PM
Modified
Jun 17, 2026, 12:10 AM