high7.5Public exploit code
CVE-2018-20658
The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon crash) via a crafted XRMD command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Core FTP 2.0 - 'XRMD' Denial of Service (PoC)2018-07-26 · dos · windows
Impact
The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon crash) via a crafted XRMD command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coreftp | Core Ftp | Version 2.0 |