Vendor
ComSndFTP
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.3CVE-2012-10055 Public exploit
ComSndFTP v1.3.7 Beta USER Format String RCE
ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory (s…