CVE-2010-20113

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2010-20113
EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the stack, potentially corrupting control flow structures. The vulnerability is exposed through the embedded web server and does not require authentication due to default anonymous access. The issue was resolved in version 1.7.0.12, after which the product was renamed to UplusFtp.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyftp_list.rb Exploit Third Party Advisory
https://www.exploit-db.com/exploits/11500 Exploit VDB Entry
https://www.vulncheck.com/advisories/easyftp-server-list-html-stack-buffer-overflow Third Party Advisory
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyftp_list.rb Exploit Third Party Advisory
https://www.exploit-db.com/exploits/11500 Exploit VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:easyftp_server_project:easyftp_server:*:*:*:*:*:*:*:*
History

10 Sep 2025, 20:06

Type Values Removed Values Added
References () https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyftp_list.rb - () https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyftp_list.rb - Exploit, Third Party Advisory
References () https://www.exploit-db.com/exploits/11500 - () https://www.exploit-db.com/exploits/11500 - Exploit, VDB Entry
References () https://www.vulncheck.com/advisories/easyftp-server-list-html-stack-buffer-overflow - () https://www.vulncheck.com/advisories/easyftp-server-list-html-stack-buffer-overflow - Third Party Advisory
First Time Easyftp Server Project
Easyftp Server Project easyftp Server
CPE cpe:2.3:a:easyftp_server_project:easyftp_server:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8

22 Aug 2025, 16:15

Type Values Removed Values Added
References () https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyftp_list.rb - () https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyftp_list.rb -
References () https://www.exploit-db.com/exploits/11500 - () https://www.exploit-db.com/exploits/11500 -
Summary
  • (es) EasyFTP Server 1.7.0.11 y versiones anteriores contienen una vulnerabilidad de desbordamiento de búfer en la pila de su interfaz HTTP. Al procesar una solicitud GET a list.html, el servidor no valida correctamente la longitud del parámetro path. Proporcionar un valor excesivamente largo provoca un desbordamiento de búfer en la pila, lo que podría dañar las estructuras del flujo de control. La vulnerabilidad se expone a través del servidor web integrado y no requiere autenticación debido al acceso anónimo predeterminado. El problema se resolvió en la versión 1.7.0.12, tras lo cual el producto cambió su nombre a UplusFtp.

21 Aug 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-21 21:15

Updated : 2025-09-10 20:06

NVD link : CVE-2010-20113

Mitre link : CVE-2010-20113

CVE.ORG link : CVE-2010-20113

JSON object : View

Products Affected

easyftp_server_project

  • easyftp_server
CWE
CWE-121

Stack-based Buffer Overflow