CVE Details
Basic Information
| Title | FreeFloat FTP Server GET Command buffer overflow |
|---|---|
| Type | cve |
| Published | 2025-05-27T01:31:04.369Z |
| Last Seen |
Product Information
| Vendor | FreeFloat |
|---|---|
| Product | FTP Server |
| Version | 1.0.0 |
CVSS Information
| Base Score | 6.9 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
| Confidentiality Impact | |
| Integrity Impact | |
| Availability Impact |
AI Analysis
| AI Description | A buffer overflow vulnerability in FreeFloat FTP Server 1.0.0’s GET command handler allows remote attackers to execute arbitrary code or cause a denial of service. The exploit is publicly available and can be used to compromise vulnerable systems. |
|---|---|
| AI Severity | High |
| Vendor | FreeFloat |
| Product | FreeFloat FTP Server |
| Affected Version | 1.0.0 |
Additional Information
| CVE List | |
|---|---|
| CWE List | CWE-120, CWE-119 |
| Bulletin Family | |
| Source Data | FreeFloat FTP Server 1.0.0 |
Source Information
| Source Data | FreeFloat FTP Server 1.0.0 |
|---|---|
| Source Link |
Description
A vulnerability was found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the component GET Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score Summary
Base Score: 6.9 (MEDIUM)