CVE-2018-7573
PoC ×3—CVSS 3.0
9.8 critical
EPSS
69%p99
Published
()
Modified
Description
An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465.
- Vendors
- ftpshell
- Products
- ftpshell client
- Weakness
- CWE-119
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.