GCVE - cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*

part: a version: 2.0d update: *

Vendor	Netwin (`84440f9c-0c8f-54f6-a00b-4d1ca5722029`)
Product	Surgeftp (`720c321e-b60b-53ef-9427-9fc11718e7dd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4742`	vulnerable	2026-06-08 05:04:49.519148	Details available Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request. Published: 2013-08-09T21:00:00.000Z Updated: 2024-08-06T16:52:27.001Z Open on db.gcve.eu Reference links http://secunia.com/advisories/54188 https://exchange.xforce.ibmcloud.com/vulnerabilities/85922 http://osvdb.org/95582 http://www.securityfocus.com/bid/61403 http://archives.neohapsis.com/archives/bugtraq/2013-07/0149.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2318`	not_vulnerable	2026-06-08 04:48:09.246262	Details available The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service (crash) via requests with two percent (%) signs in the CMD parameter. Published: 2005-08-16T04:00:00.000Z Updated: 2024-08-08T01:22:13.621Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/15001 http://members.lycos.co.uk/r34ct/main/surge_FTP/surge-ftp.txt http://www.secunia.com/advisories/10758/ http://www.osvdb.org/3788 http://www.securityfocus.com/bid/9554	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1356`	vulnerable	2026-06-08 04:46:19.665026	Details available NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021. Published: 2002-06-11T04:00:00.000Z Updated: 2024-08-08T04:51:08.128Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/6961.php http://online.securityfocus.com/archive/1/201951 http://www.securityfocus.com/bid/3157	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.