PT-2025-31975 · Unknown · Freefloat Ftp Server

Published 2025-08-05 · Updated 2025-08-06 · CVE-2012-10023

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeFloat FTP Server version 1.0.0

Description A stack-based buffer overflow exists in the server. The server does not properly validate input sent to the USER command, potentially allowing remote attackers to overwrite memory and execute arbitrary code. The issue is triggered by sending an overly long username string, which overflows the buffer allocated for user authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2012-10023

Affected Products

Freefloat Ftp Server

References · 9

• 🔥 https://exploit-db.com/exploits/15689 · Exploit
• 🔥 https://exploit-db.com/exploits/23243 · Exploit
• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_user.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-10023 · Security Note
• https://web.archive.org/web/20101213050627/http://freefloat.com/sv/about-/about-.php · Note
• https://my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmd · Note
• https://t.me/cveNotify/131132 · Telegram Post
• https://vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow · Note
• https://web.archive.org/web/20101208040029/http://secunia.com/advisories/42465 · Note