Easyftp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:kmint21_software:easyftp_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kmint21 Software (2aa47213-c267-51ea-898b-32c9d160552c) |
|---|---|
| Product | Easyftp Server (3ff47c55-1d96-5bbb-9a24-75e93650a592) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-20121 |
vulnerable | 2026-06-08 04:54:11.216870 |
EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow
EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD (Change Working Directory) command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack. This flaw enables remote code execution without authentication, as EasyFTP allows anonymous access by default. The vulnerability was resolved in version 1.7.0.12, after which the product was renamed “UplusFtp.”
Published: 2025-08-21T20:10:20.597Z
Updated: 2026-05-15T11:13:36.577Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-20113 |
vulnerable | 2026-06-08 04:54:11.210554 |
EasyFTP Server list.html path Stack Buffer Overflow
EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the stack, potentially corrupting control flow structures. The vulnerability is exposed through the embedded web server and does not require authentication due to default anonymous access. The issue was resolved in version 1.7.0.12, after which the product was renamed to UplusFtp.
Published: 2025-08-21T20:10:42.037Z
Updated: 2026-05-15T11:13:32.934Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.