Back to CVE Browser

CVE-2009-1675

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1870%

EPSS Percentile6.48th

PublishedMay 18, 2009

Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command.

Affected Platforms (CPE)

📦

Electrasoft

32bit Ftp

= 09.04.24

References & Advisories

🔗 http://www.securityfocus.com/bid/34838

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/50337

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/50644

🔗 https://www.exploit-db.com/exploits/8623

🔗 http://www.securityfocus.com/bid/34838

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/50337

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/50644

🔗 https://www.exploit-db.com/exploits/8623

Related Vulnerabilities

CVE-2009-159210.0

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banne...

CVE-2009-161110.0

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 r...

CVE-2003-13686.4

Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibly execute a...

CVE-2009-049210.0

Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerabilit...