PT-2025-34095 · Undefined · Undefined

Published 2025-08-20 · Updated 2025-08-20 · CVE-2010-10014

NVD

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious FTP server can send an overly long filename in the directory listing, which overflows a fixed-size stack buffer in the client and overwrites the Structured Exception Handler (SEH). This allows remote attackers to execute arbitrary code on the client system.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2010-10014

Affected Products

Undefined

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-10014 · Security Note
• https://web.archive.org/web/20111007123101/http://odinshare.com/secure-ftp-expert.html · Note
• https://vulncheck.com/advisories/odin-secure-ftp-stack-buffer-overflow-via-list-response · Note
• https://exploit-db.com/exploits/16716 · Note
• https://web.archive.org/web/20111016194057/https://corelan.be/index.php/2010/10/12/death-of-an-ftp-client · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/odin_list_reply.rb · Note