PT-2025-31539 · Freeftpd · Freeftpd

Published 2025-07-31 · Updated 2025-11-26 · CVE-2013-10042

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions freeFTPd versions 1.0.10 and earlier

Description A stack-based buffer overflow exists due to improper handling of the FTP PASS command. The application does not validate the length of the input password string, leading to memory corruption. This can result in a denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2013-10042

Affected Products

Freeftpd

References · 5

• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freeftpd_pass.rb · Exploit
• 🔥 https://exploit-db.com/exploits/27747 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-10042 · Security Note
• https://t.me/cveNotify/144080 · Telegram Post
• https://vulncheck.com/advisories/freeftpd-pass-command-stack-based-buffer-overflow · Note