An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.
Priority LOW 39CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and GitHub. Impact type from CWE-22 and the CVSS impact.
Summary
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.
Why it matters now
EPSS 0.1433 96th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | CoreFtp (NuGet) | up to 2.0 | — | No fix listed | GHSA-w393-h95m-f879 |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- CoreFtp (NuGet) Vendor— Affected up to 2.0 Fixed in — No fix listed GHSA-w393-h95m-f879
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-9648
- 2026-10-03 Alias added: GHSA-w393-h95m-f879
References
Exploit 2
Advisory 2
Other 4
- 20190825 CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal (Metasploit) Exploit
- http://packetstormsecurity.com/files/154204/CoreFTP-Server-SIZE-Directory-Traversal.html
- https://github.com/sparkeh9/CoreFTP
- https://web.archive.org/web/20210125013812/https://www.securityfocus.com/bid/107446
More Coreftp Core Ftp vulnerabilities
- TI-2019-15738 Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service CVSS 4.0HIGH 8.7
- TI-2019-15707 Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow CVSS 4.0HIGH 8.7
- TI-2018-08689 Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may… CVSS 3.0CRITICAL 9.8
- TI-2009-03322 Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote… CVSS 2.0HIGH 9.3
- TI-2013-03432 Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers… CVSS 2.0HIGH 9.3
- TI-2020-13650 Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username. CVSS 3.1CRITICAL 9.8
Sources
- CVE-2019-9648 · CVE Program
- CVE-2019-9648 · NVD
- FIRST EPSS
- GHSA-w393-h95m-f879 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences