CVE-2012-10023

Katalog CVE

CVSS 9.8 · Critical EPSS 2,5%

Kerentanan Stack-based Buffer Overflow pada freefloat ftp server. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is triggered by sending an overly long username string, which overflows the buffer allocated for user authentication.

Rincian

Terbit di NVD

5 Agustus 2025

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

2,5% peluang dieksploitasi; lebih tinggi dari 84,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmd advisory pihak ketiga
• https://web.archive.org/web/20101208040029/http://secunia.com/advisories/42465/ advisory pihak ketiga
• https://www.vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow advisory pihak ketiga
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp... exploit
• https://www.exploit-db.com/exploits/15689 exploit
• https://www.exploit-db.com/exploits/23243 exploit
• https://web.archive.org/web/20101213050627/http://www.freefloat.com/sv/about-/about-.php product