CVE-2020-8416

BearFTP prior to v0.2.0 is vulnerable to a denial-of-service caused by a flood of connections to the PASV port. The CVE description specifies a DoS via large numbers of PASV connections; no additional mitigation or fixed version is declared in the provided materials. Public exploit entries exist ...

CVE-2020-8815

The CVE-2020-8815 issue affects IKTeam BearFTP (before v0.3.1) where the base connection handler mishandles connections, enabling remote denial of service via a Slowloris-style flood of small packets. The connected sources corroborate BearFTP as the affected product and the vulnerability class as...