GCVE - cpe:2.3:a:freeftpd:freeftpd:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:freeftpd:freeftpd:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-10042`	vulnerable	2026-06-08 05:03:51.901921	freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled. Published: 2025-07-31T14:55:25.594Z Updated: 2026-05-15T11:14:10.534Z Open on db.gcve.eu Reference links https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freeftpd_pass.rb https://www.exploit-db.com/exploits/27747 https://www.vulncheck.com/advisories/freeftpd-pass-command-stack-based-buffer-overflow	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6067`	vulnerable	2026-06-08 05:02:59.112903	Details available freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c. Published: 2012-12-04T23:00:00.000Z Updated: 2024-09-16T23:16:04.154Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0011.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.