Skip to content
Threat Feed

Product

Basic-Ftp (<= 5.3.0)

1 brief RSS
medium advisory

basic-ftp Client-Side Denial of Service via Malicious FTP Server

The basic-ftp library is vulnerable to a client-side denial of service. A malicious FTP server can send an unterminated multiline response during the initial FTP banner phase, before authentication, causing the client to buffer attacker-controlled data without limit.

basic-ftp dos ftp denial-of-service client-side
2r 1t