CVE-2013-3930

CRITICAL 9.3CVE-2013-3930 · Published 04/04/2014 · updated 16/06/2026

In short

CVE-2013-3930 is a CRITICAL (CVSS 9.3) vulnerability affecting core ftp (coreftp).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
core ftp coreftp	`≤ 2.2`	No fix yet

Description

Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply.

References

osvdb.org/96314
secunia.com/advisories/53743 · Vendor Advisory
coreftp.com/forums/viewtopic.php · Patch
securityfocus.com/bid/61786

More vulnerabilities in core ftp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free