Buffer Overflow in YATinyWinFTP Causes Denial of Service

Publication date: 2026-01-28

Last updated on: 2026-01-28

Assigner: VulnCheck

Description

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-01-28

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2020-36964

EUVD

EUVD-2020-30885

Affected Vendors & Products

Vendor	Product	Version / Range
unknown_vendor	yatinywinftp	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

YATinyWinFTP has a denial of service vulnerability where an attacker can crash the FTP service by sending a specially crafted 272-byte buffer with a trailing space. This malformed command triggers a buffer overflow, causing the service to crash.

Impact Analysis

This vulnerability can cause the FTP service to crash, resulting in denial of service. This means legitimate users may be unable to access the FTP service until it is restarted or fixed, potentially disrupting business operations.

Hi! I’m here to help you understand CVE-2020-36964. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70