6.9
CVSS 4.0
2,7%
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: има публичен пример за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is triggered by sending an overly long username string, which overflows the buffer allocated for user authentication.
Засегнати продукти
- FreeFloat FTP Server: *
Вид слабост
История
- 5 август 2025 Публикувано
Други уязвимости в FreeFloat FTP Server
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2012-10023
- https://nvd.nist.gov/vuln/detail/CVE-2012-10023
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_user.rb
- https://www.exploit-db.com/exploits/23243
- https://my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmd
- https://www.exploit-db.com/exploits/15689
- https://web.archive.org/web/20101208040029/http://secunia.com/advisories/42465/
- https://web.archive.org/web/20101213050627/http://www.freefloat.com/sv/about-/about-.php
- https://www.vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow