Skip to content
OpenAdvisories

Product · ComSndFTP

FTP Server

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2012-10055 Public exploit

    ComSndFTP v1.3.7 Beta USER Format String RCE

    ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory (s…