A buffer overflow vulnerability in Core FTP Lite 1.3c allows unauthenticated attackers to trigger a denial of service condition through oversized input in the username field.

This is a classic buffer overflow (CWE-120) triggered by providing a 7000-byte payload into the username input field. The vulnerability is exploitable by an unauthenticated attacker who has access to the application interface.

Successful exploitation results in a denial of service, rendering the Core FTP application unresponsive and necessitating a manual restart. While the CVSS score of 7.5 reflects a high impact on availability, the primary business risk involves the disruption of critical file transfer operations and potential loss of productivity for users relying on the software for data exchange.

Immediate Action: As no official patch is currently identified for this legacy version, users are advised to restrict access to the application and monitor vendor channels for any potential security updates or decommissioning notices.

Proactive Monitoring: Security teams should monitor system logs for unusual application crashes or repeated service failures associated with the Core FTP process.

Compensating Controls: Implement endpoint security policies to restrict the execution of unauthorized or outdated software and utilize host-based intrusion prevention systems to detect anomalous input patterns targeting the application.

Public Exploit Available: Yes, a proof-of-concept exploit is available via Exploit-DB (EDB-ID: 48100).

Given the availability of a public proof-of-concept and the ease of exploitation, organizations still utilizing Core FTP Lite 1.3c should prioritize migrating to a modern, actively maintained file transfer solution. If migration is not immediately feasible, isolate affected systems from public networks to minimize exposure to potential exploitation attempts.