CVE-2020-37067CWE-770

Filetto 1.0 - 'FEAT' Denial of Service

High · published February 3, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

⚡ A single oversized FEAT command is all it takes to take down your FTP server! This vulnerability allows attackers to send a whopping 11,008 bytes of chaos to crash the service. 😱 Think of it like a restaurant where an unwitting customer orders an impossibly massive dish. The kitchen can't handle such a request, leading to a massive backlog and ultimately, a kitchen shutdown! In this case, an attacker can send a malicious command that overwhelms the server's resources, causing it to crash and leaving legitimate users unable to connect. This could lead to service downtime and disrupted operations, which, let's be honest, is absolutely devastating for any business relying on FTP!

Put simply

Think of it like a restaurant where an unwitting customer orders an impossibly massive dish. The kitchen can't handle such a request, leading to a massive backlog and ultimately, a kitchen shutdown! This vulnerability in Filetto 1.0's FTP server involves a buffer overflow triggered by a malformed FEAT command, allowing an attacker to send excessive data that the server cannot handle. This results in the termination of the FTP service, preventing further connections.

What to do

In this case, an attacker can send a malicious command that overwhelms the server's resources, causing it to crash and leaving legitimate users unable to connect. This could lead to service downtime and disrupted operations, which, let's be honest, is absolutely devastating for any business relying on FTP! To mitigate this issue, upgrade your Filetto FTP server to the latest version where this flaw is patched. Additionally, consider implementing input validation to limit command size and prevent similar attacks in the future. You've got this! With these steps, you can fortify your server against this pesky vulnerability. 🛡️

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00432 · 36.5th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-02-03T22:01Z
EPSS history
Timeline
  • 03 FEB 22:01Z
    Filetto 1.0 - 'FEAT' Denial of Service
    cvelistv5