CVE-2019-17320

State
Published
Severity
Not scored
Published
Oct 10, 2019
Updated
Aug 5, 2024
Reserved
Oct 7, 2019

Read the record on cve.org

Description

NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

ProductVersions
XFTPNetSarang
  • 6.0149 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.