Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to trigger an application crash and deny service.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25654 Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domai… https://www.cve.org/CVERecord?id=CVE-2019-25654
Post summary
The post details a buffer overflow vulnerability in Core FTP/SFTP Server 1.2 that can crash the service via an oversized User domain string, and links to the CVE record for reference.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25654 - Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow Intel Report: https://ift.tt/lU89jIP
Post summary
The alert announces CVE-2019-25654, listing it as a buffer‑overflow denial‑of‑service flaw in Core FTP/SFTP Server 1.2, and provides a link to an intel report, but provides no evidence of active exploitation, a PoC, or a patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | coreftp | core_ftp | 1.2 | - | - |