CVE-2019-9760

FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted…

published March 14, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
53%
Percentile
99.0
In the wild
Unconfirmed
What it is

🚨 An FTP connection could open the door to remote code execution with just a sneaky response from a malicious server! Think of it like ordering a meal at a restaurant, and the server brings you a plate that looks delicious but is actually filled with something dangerous—suddenly, you’re in a world of hurt because you trusted the delivery! An attacker could exploit this vulnerability to execute arbitrary code on your machine when you initiate an FTP connection, potentially leading to a complete system compromise. To make matters worse, if the crafted response is long enough, it can even crash your FTP client due to memory corruption, leaving your operations in a tailspin.

Put simply

Think of it like ordering a meal at a restaurant, and the server brings you a plate that looks delicious but is actually filled with something dangerous—suddenly, you’re in a world of hurt because you trusted the delivery! This vulnerability in FTPGetter Standard v.5.97.0.177 allows remote code execution when a user connects to an attacker-controlled FTP server that sends specially crafted responses. The flawed handling of these responses can also cause memory corruption, leading to application crashes.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on your machine when you initiate an FTP connection, potentially leading to a complete system compromise. To make matters worse, if the crafted response is long enough, it can even crash your FTP client due to memory corruption, leaving your operations in a tailspin. To safeguard against this vulnerability, ensure you upgrade to the latest version of FTPGetter and avoid connecting to unknown or untrusted FTP servers. Regularly audit your applications for any potential vulnerabilities and implement network security measures to restrict unauthorized connections. You’ve got this! By following these steps, you're taking control of your security and keeping those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.53093 · 99.0th percentile
Published
2019-03-14T01:00Z
EPSS history
Timeline
  • 14 MAR 01:00Z
    FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted…
    cvelistv5