CVE Daily

CVE-2012-10023

A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server versi...

Medium CVSS 6.9

Overview

A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is triggered by sending an overly long username string, which overflows the buffer allocated for user authentication.

CWE: CWE-121 Published: 2025-08-05T20:15:32.000
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.9 (MEDIUM)
  • Detected tags: buffer, rce (tag impact: VERY HIGH)

Recommended actions:

  • Patch/upgrade immediately (remote code execution).
  • Reduce exposure (WAF/segmentation), minimize attack surface.

Recommended tools

Tags