CVE-2013-10042

Katalog CVE

CVSS 9.8 · Critical EPSS 2,6%

Kerentanan Stack-based Buffer Overflow pada freeftpd. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled.

Rincian

Terbit di NVD

31 Juli 2025

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 84,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/freeftpd-pass-command-stack-based-buffer-overflow advisory pihak ketiga
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freeftpd_pas... exploit
• https://www.exploit-db.com/exploits/27747 exploit