freeFTPd records
7 published records for vendor freeftpd.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 3 · 42.9%
- Pre-auth RCE
- 4
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-121 Stack-based Buffer Overflow1
- CWE-287 Improper Authentication1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2013-10042Weaponized | freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflowfreeftpd · freeftpd · CWE-121 | Critical9.3 | — | 2.9% | Jul 31, 2025 |
52Plan | CVE-2006-2407Weaponized | Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) Freweonlydo · wodsshserver · CWE-119 | High7.5 | — | 71.9% | May 16, 2006 |
51Plan | CVE-2005-3683Weaponized | Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (applicationfreeftpd · freeftpd | High7.5 | — | 71.5% | Nov 18, 2005 |
41Plan | CVE-2012-6067No exploit | freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an Ofreeftpd · freeftpd · CWE-287 | Critical10.0 | — | 3.1% | Dec 4, 2012 |
36Monitor | CVE-2019-19383Proof of concept | freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled).freeftpd · freeftpd · CWE-120 | High8.8 | — | 2.8% | Dec 3, 2019 |
34Monitor | CVE-2005-3684Proof of concept | Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (appfreeftpd · freeftpd | High7.5 | — | 13.7% | Nov 18, 2005 |
28Monitor | CVE-2005-3812Proof of concept | freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT command with missing freeftpd · freeftpd | Medium6.8 | — | 2.9% | Nov 25, 2005 |
- CVE-2013-1004260This week
freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow
CriticalCVSS 9.3WeaponizedEPSS 2%freeftpd · freeftpdJul 31, 2025
- CVE-2006-240752Plan
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) Fre
HighCVSS 7.5WeaponizedEPSS 71%weonlydo · wodsshserverMay 16, 2006
- CVE-2005-368351Plan
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application
HighCVSS 7.5WeaponizedEPSS 71%freeftpd · freeftpdNov 18, 2005
- CVE-2012-606741Plan
freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an O
CriticalCVSS 10.0No exploitEPSS 3%freeftpd · freeftpdDec 4, 2012
- CVE-2019-1938336Monitor
freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled).
HighCVSS 8.8Proof of conceptEPSS 2%freeftpd · freeftpdDec 3, 2019
- CVE-2005-368434Monitor
Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (app
HighCVSS 7.5Proof of conceptEPSS 13%freeftpd · freeftpdNov 18, 2005
- CVE-2005-381228Monitor
freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT command with missing
MediumCVSS 6.8Proof of conceptEPSS 2%freeftpd · freeftpdNov 25, 2005