GCVE - cpe:2.3:a:smartftp:smartftp:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:smartftp:smartftp:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Smartftp (`92a6fe71-85ef-5275-8c83-116e0ce88c61`)
Product	Smartftp (`241ea342-959f-50aa-9124-f96d3045905b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-25234`	vulnerable	2026-06-08 05:11:29.647400	SmartFTP Client 9.0.2615.0 Denial of Service via Host Field MEDIUM (6.2) SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can paste a buffer of 300 repeated characters into the Host connection parameter to trigger an application crash. Published: 2026-03-30T11:02:25.501Z Updated: 2026-04-01T18:06:41.161Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45759 https://www.smartftp.com/en-us/ https://www.smartftp.com/en-us/download https://www.vulncheck.com/advisories/smartftp-client-denial-of-service-via-host-field	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4871`	vulnerable	2026-06-08 04:56:31.304288	Details available Unspecified vulnerability in SmartFTP before 4.0 Build 1142 allows attackers to have an unknown impact via a long filename. Published: 2011-10-07T10:00:00.000Z Updated: 2024-08-07T04:02:30.451Z Open on db.gcve.eu Reference links http://secunia.com/advisories/42060 http://smartftp.com/forums/index.php?/topic/16425-smartftp-client-4-0-change-log https://exchange.xforce.ibmcloud.com/vulnerabilities/63113 http://osvdb.org/69136	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3099`	vulnerable	2026-06-08 04:55:12.718579	Details available Directory traversal vulnerability in SmartSoft Ltd SmartFTP Client 4.0.1124.0, and possibly other versions before 4.0 Build 1133, allows remote FTP servers to overwrite arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information. Published: 2010-08-20T19:00:00.000Z Updated: 2024-09-17T01:56:22.166Z Open on db.gcve.eu Reference links http://secunia.com/advisories/40899 http://www.htbridge.ch/advisory/directory_traversal_in_smartftp.html http://www.smartftp.com/forums/index.php?/topic/16425-smartftp-client-40-change-log/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1319`	vulnerable	2026-06-08 04:47:47.313060	Details available Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via (1) a long response to a PWD command, which triggers a stack-based overflow, and (2) a long line in a response to a file LIST command, which triggers a heap-based overflow. Published: 2007-02-07T19:00:00.000Z Updated: 2024-08-08T02:19:46.111Z Open on db.gcve.eu Reference links http://secunia.com/advisories/8998 http://www.securityfocus.com/bid/7858 http://security.nnov.ru/docs4679.html http://securitytracker.com/id?1006956 https://exchange.xforce.ibmcloud.com/vulnerabilities/12231	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.