NetWin SurgeFTP 2.0f

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:surgeftp:2.0f:*:*:*:*:*:*:*

part: a version: 2.0f update: *

VendorNetwin (84440f9c-0c8f-54f6-a00b-4d1ca5722029)
ProductSurgeftp (720c321e-b60b-53ef-9427-9fc11718e7dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4742 vulnerable 2026-06-08 05:04:49.520468 Details available
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.
Published: 2013-08-09T21:00:00.000Z
Updated: 2024-08-06T16:52:27.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2318 not_vulnerable 2026-06-08 04:48:09.247296 Details available
The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service (crash) via requests with two percent (%) signs in the CMD parameter.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-08T01:22:13.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1356 vulnerable 2026-06-08 04:46:19.666218 Details available
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T04:51:08.128Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.