Core FTP/SFTP Server version 1.2 contains a buffer overflow in the User domain field. An attacker can inject a 7000-byte string into the domain configuration, causing the service to crash and deny availability. This vulnerability represents a high-impact denial of service condition classified as CWE-787.

The affected product is Core FTP/SFTP Server 1.2, developed by Core FTP. No other versions are explicitly listed as vulnerable in the available data.

With a CVSS score of 8.7, the vulnerability is rated high severity. The EPSS score is not available, and the issue is not listed in the KEV catalog. The incident requires remote modification of the User domain configuration; while the exact attack vector is not detailed, it is inferred that an attacker with administrative access or remote configuration capabilities could exploit the overflow, resulting in service crashes. The risk of exploitation remains significant due to the high impact and lack of mitigation documentation.