CVE-2020-19595: 
CoreFTP Server vulnerability analysis and mitigation

Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. The vulnerability was discovered in 2020 and assigned CVE-2020-19595. The affected software is Core FTP Server version 2 Build 697 (NVD, MITRE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified as CWE-120 (Buffer Copy without Checking Size of Input - Classic Buffer Overflow). The issue occurs when processing a crafted username input, which can lead to a buffer overflow condition (NVD).

The successful exploitation of this vulnerability can lead to service disruption and potential system compromise. The vulnerability affects the availability of the system, as indicated by the CVSS metrics showing high impact on availability but no direct impact on confidentiality or integrity (NVD).

The vulnerability is remotely exploitable and requires no authentication or user interaction. Technical details about the exploitation have been publicly disclosed, making it a significant security risk (0x90 Zone).

Users should upgrade to a patched version of Core FTP Server. The vulnerability was addressed after responsible disclosure to the vendor, who provided a patch to clients (0x90 Zone).