← back
CVE-2020-8416

CVE-2020-8416

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 14%
from disclosure to weapon5 days
Published on NVDJan 29
1st PoC+5d
exploitation probability
14%top 4% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to the PASV mode port.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/156170/BearFTP-0.1.0-Denial-Of-Service.htmlunverifiedexploitdbwww.exploit-db.com/exploits/47987unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/156170/BearFTP-0.1.0-Denial-Of-Service.htmlhttps://github.com/kolya5544/BearFTP/blob/0.2.0/CHANGELOG.txthttps://github.com/kolya5544/BearFTP/commit/9965337f9d4c0325e4aab324dcd485e4cbb7b428https://github.com/kolya5544/BearFTP/releases/tag/0.2.0https://pastebin.com/wqNWnCuN