CVE-2012-10023

medium

Description

A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is triggered by sending an overly long username string, which overflows the buffer allocated for user authentication.

References

Advisories
More

https://www.vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow

https://web.archive.org/web/20101208040029/http://secunia.com/advisories/42465/

https://my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmd

https://web.archive.org/web/20101213050627/http://www.freefloat.com/sv/about-/about-.php

Details

Source: Mitre, NVD

Published: 2025-08-05

Updated: 2025-09-03

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

CVSS v4

Base Score: 6.9

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.01672