Design/Logic Flaw

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...

CVE-2014-1443

Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information password for the previous user via a USER command with a specific length, possibly related to an out-of-bounds read...

CVE-2014-1442

Core FTP Server 1.2 before build 515 is vulnerable to a Directory Traversal via the XCRC command. The flaw allows remote authenticated users to determine the existence of arbitrary files using a /../ sequence. Affected software: Core FTP Server (version 1.2 prior to build 515). Root cause: improp...