← Back to CVEs

CVE-2010-20121

CRITICAL

9.8

Description

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD (Change Working Directory) command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack. This flaw enables remote code execution without authentication, as EasyFTP allows anonymous access by default. The vulnerability was resolved in version 1.7.0.12, after which the product was renamed “UplusFtp.”

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/21/2025

Last Modified9/10/2025

Sourcenvd

Honeypot Sightings0

Affected Products

easyftp_server_project:easyftp_server

Weaknesses (CWE)

CWE-121

References

https://paulmakowski.wordpress.com/2010/02/28/increasing-payload-size-w-return-address-overwrite/(disclosure@vulncheck.com)

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/easyftp_cwd_fixret.rb(disclosure@vulncheck.com)

https://seclists.org/bugtraq/2010/Feb/202(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/11668(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/12312(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/14402(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/16737(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/easyftp-server-cwd-command-stack-buffer-overflow(disclosure@vulncheck.com)

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/easyftp_cwd_fixret.rb(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://seclists.org/bugtraq/2010/Feb/202(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://www.exploit-db.com/exploits/11668(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://www.exploit-db.com/exploits/12312(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://www.exploit-db.com/exploits/14402(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://www.exploit-db.com/exploits/16737(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.