CVE-2012-10023

NGHIÊM TRỌNG 9.8CVE-2012-10023 · Công bố 05/08/2025 · cập nhật 16/06/2026

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
freefloat ftp server freefloat	`= 1.0`	Chưa có bản vá

Mô tả

A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is triggered by sending an overly long username string, which overflows the buffer allocated for user authentication.

Tham khảo

my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmd · Third Party Advisory
raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_user.rb · Exploit
web.archive.org/web/20101208040029/http://secunia.com/advisories/42465 · Third Party Advisory
web.archive.org/web/20101213050627/http://www.freefloat.com/sv/about-/about-.php · Product
exploit-db.com/exploits/15689 · Exploit
exploit-db.com/exploits/23243 · Exploit
vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow · Third Party Advisory

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí