Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:surgeftp:2.3a2:*:*:*:*:*:*:*

part: a version: 2.3a2 update: *

VendorNetwin (84440f9c-0c8f-54f6-a00b-4d1ca5722029)
ProductSurgeftp (720c321e-b60b-53ef-9427-9fc11718e7dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4742 vulnerable 2026-06-08 05:04:49.523352 Details available
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.
Published: 2013-08-09T21:00:00.000Z
Updated: 2024-08-06T16:52:27.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1052 vulnerable 2026-06-08 04:50:18.675307 Details available
The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails.
Published: 2008-02-27T19:00:00.000Z
Updated: 2024-08-07T08:08:57.568Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.