Sensitive Information Disclosure in Core FTP Server 1.2 Build 515

CVE-2014-1443 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with a specific length, possibly related to an out-of-bounds read.

Learn more about our Cis Benchmark Audit For Server Software.