CVE-2020-37209 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can ge…
Medium CVSS: 4.6

CVE-2020-37209

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.
Vendor
Nsasoft
Product
Spotftp
CWE
CWE-120
Yayın Tarihi
2026-02-11 21:16:16
Güncelleme
2026-02-20 20:20:21
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-120 Spotftp MEDIUM Nsasoft 2026

Referanslar

http://www.nsauditor.com/ https://www.exploit-db.com/exploits/47868 https://www.vulncheck.com/advisories/spotftp-ftp-password-recovery-name-denial-of-service