Approved changes feed: RSS · Atom

cpe:2.3:a:zftp:zftp_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZftp (1d4173e9-21e8-572a-ad0f-bafd34d5744a)
ProductZftp Client (29af026f-08f0-5b91-8cc9-47336821077e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-20046 vulnerable 2026-06-08 05:07:32.559314 zFTP Client 20061220+dfsg3-4.1 Local Buffer Overflow
HIGH (8.4)
zFTP Client 20061220+dfsg3-4.1 contains a buffer overflow vulnerability in the NAME parameter handling of FTP connections that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized NAME value exceeding the 80-byte buffer allocated in strcpy_chk to overwrite the instruction pointer and execute shellcode with user privileges.
Published: 2026-03-28T11:58:06.907Z
Updated: 2026-04-01T13:58:58.638Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.