| Package | Affected versions | Patched versions |
|---|---|---|
| freefloat ftp server | = 1.0 |
Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command containing 247 bytes of padding followed by a return address and shellcode to trigger code execution on the FTP server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free