CVE Vulnerability

CVE-2020-8815

Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to achieve denial of service via a Slowloris approach by sending a large volume of small packets.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/kolya5544/BearFTP/blob/f5a8047587c1a96456d4f291c12b038b9ab0d0c5/BearFTP/Program.cs#L503-L525 Exploit Third Party Advisory
https://github.com/kolya5544/BearFTP/releases/tag/0.4.0 Release Notes Third Party Advisory
https://github.com/kolya5544/BearFTP Third Party Advisory
https://github.com/kolya5544/BearFTP/commit/66dc9d95e58bca133f265457d32007cdf38b66ad Patch Third Party Advisory
https://github.com/kolya5544/BearFTP/commit/17a6ead72d4a25cbfcef5e27613aa0a5f88a4b26 Patch Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:iktm:bearftp:*:*:*:*:*:*:*:*
Information

Published : 2020-02-12 03:15

Updated : 2020-02-19 08:18

NVD link : CVE-2020-8815

Mitre link : CVE-2020-8815

Products Affected
No products.
CWE
CWE-20