CVE-2019-9668

Name of the Vulnerable Software and Affected Versions rovinbhandari FTP through 2012-03-28

Description An issue was discovered that allows remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved by setting the datalen field value to 0xffff in the receive file function.

Recommendations For rovinbhandari FTP through 2012-03-28, consider restricting access to the receive file function in file transfer functions.c to minimize the risk of exploitation until a fix is available.